{"report_id":"c616fc10-143b-4f2a-8318-66cc808bec06","version":6,"status":"done","tags":[],"date":"2025-12-25T21:50:28Z","url":{"schema":"http","addr":"ugurfilm3.xyz/player/play.php?vid=3f5346a3428c636318e7da22478e8e56","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ugurfilm3.xyz/","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"title":"Uğur Film - Film izle","dom":{"size":51025,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (36685)","md5":"e53ecbfbb6ff63ca3da84f743065b49c","sha1":"19d464328b02e3a0a8815631f512f8770719bb93","sha256":"5f1d518273415a2f39393c7397bbd8fc24d98aac99c667d50da3469301637b36","sha512":"ec799aca18fe3cc7321c76095d2dbfa03bd635aa259ff8da602ef81f8644a0d56d8b52c2244da9b1a89f38364b85b9a6e3d816a5a6986a53e536b99b21bc9359","ssdeep":"768:TJqeZdypJRj8o4Fadk1M7EBSG8EceFBaRr1+2AVoG6Ml:TJdypnj8/9Bl8IFBaRr1+2AVoG6Ml","tlshash":"e333c7b39265613b172fa7d99296771de1c2520fca460e16b2fc25d46fc9ef2b0d202c","dom_hash":"domhashd61f27010cf07ea8c48b4bb5aa6f8d2a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ugurfilm3.xyz/player/play.php?vid=3f5346a3428c636318e7da22478e8e56","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-29T21:50:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ugurfilm3.xyz","ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-30","domain_rank":0,"first_seen":"2025-12-25T21:50:29.741618Z","last_seen":"2025-12-25T21:50:29.741618Z","alert_count":76,"request_count":38,"received_data":2849574,"sent_data":22395,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Site Kit:1.168.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Gravatar","description":"Gravatar is a service for providing globally unique avatars.","website":"https://gravatar.com","common_platform_enumeration":"","icon":"Gravatar.png","categories":["Miscellaneous"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-21T22:14:03.270461Z","alert_count":0,"request_count":8,"received_data":300126,"sent_data":4212,"comment":"","tags":null,"fingerprints":null},{"fqdn":"secure.gravatar.com","ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2004-07-15","domain_rank":16323,"first_seen":"2012-05-22T05:36:38Z","last_seen":"2025-12-22T04:05:13.203563Z","alert_count":0,"request_count":3,"received_data":4733,"sent_data":1472,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-12-21T22:22:55.693237Z","alert_count":0,"request_count":1,"received_data":847,"sent_data":1003,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-12-21T22:19:29.872886Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":782,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-21T22:17:33.83847Z","alert_count":0,"request_count":1,"received_data":436368,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ugurfilm3.xyz/site_js_ayd-js-extra","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"01abe66945c705234bff320d32023fcf","sha1":"f552347f84c77160cc5d3ebe7c309d26ba035acf","sha256":"434bdf3068e070c55563e96c1d11fc615d00a6de4c411d09624615e324a6f282","sha512":"459feb1e4eef08b6eb0583299c73daf510a4de1f9995f7aed61328a3b33c521bf6fb692b9ce75302eefbf8f539f3ca834c597053c34c09627b133d76d7f657a6","ssdeep":"","tlshash":"deb0120680f03cd228760cfc52e18023d7e95580c2944e399e8c81594f31c409290adc","size":100,"data":"","first_seen":"2025-12-25T21:50:35.665592Z","last_seen":"2026-01-03T08:11:54.24237Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/themes/Wpdeo_Star/__cache/Min/js.php?ver=1.4.7","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80ff00673ad6a3a693476000e231db32","sha1":"83564b174ee65bc195303017916e15d2d2c49ffd","sha256":"37aca532fe57665530175800779ded939b9708dd7643ad36b2243e2a46a2cc6f","sha512":"1e457dfa70b95bbd068f20b2e72123f62409e51b39ef3382c03f8e2ff4d7fa55c661f83c883479fac8ed1f9284b29eec995bffd0128f6f91dcd2593216249906","ssdeep":"12288:acG+nXNolxTQIcVU9zgfLzRA6amfuheEPQVE3IH3eN5ZC/pwZryWj3b:acG+nXNolxTQIcVU9zgfLzRA6am6eEPV","tlshash":"8ae4094972b53226427771b5a42f220fb23a9158b205c25cb05e86dd7d68c34a1fbffe","size":692975,"data":"","first_seen":"2025-12-25T21:50:35.669065Z","last_seen":"2026-01-03T08:11:54.246792Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-NGPB52Q3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5154e905a63055d8a16ba250ccd2a42f","sha1":"ad8ff54ce67bc2690c73a4fd53f88848bd840fe4","sha256":"90a22b8421bc215af61ff949ccdf840809adccb60835d890e869fc9cef66f93a","sha512":"01219dfae515b0457f87fa5f8fb820b0c588ab113abc496b058b3d28dce7acdbaaee85d72b9772814cd65d9cccdb70161b54e69e8a24255af385d1b783d3dfa9","ssdeep":"6144:i0Ie7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1pY:8C8bu7/1mbrnsy39WbMpL","tlshash":"439419ce73d674269396e078503f118ba57b29e2b45cc896f189cce02e7469a4237f7c","size":435764,"data":"","first_seen":"2025-12-25T21:50:35.654464Z","last_seen":"2025-12-25T21:50:35.654464Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/google_gtagjs-js-after","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd6a6bee68b80306c4029623b46dcb87","sha1":"cc57e4567aac5c17e27a5565e98d8ec51f0de562","sha256":"333cdf0039c7fae8d60e94fdb0bf40007c3d101c57cbec44efbe9d78f1f708bf","sha512":"4094d805313692a0d9e365a271c9cf2b4fa41aca55172cd4ab7f213f87a69405ef6274cea2828ac3a3b626127fd4f204ec6310e69c70e2dadf7e15e7d830e274","ssdeep":"","tlshash":"2d01f57360c11afbc9bab912676677963a6333ead674641049dc160438bfd57e0d4cc8","size":761,"data":"","first_seen":"2025-12-25T21:50:35.672121Z","last_seen":"2026-01-03T08:11:54.248003Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"19494d1f8ac361ecae7fa3de82edb9bb","sha1":"2f783044d9315a03db56e60347c8764c1afcb3f8","sha256":"333b3c51ba1bc1067afe43da61fbab160bf1a98e446d2a306d756c648b5d061b","sha512":"e63bef342627a9f2f6d113f709fa01d70781a62f7275f7be7ed39e751e3a15fbd24e00b472815340b7306611bf4de61ee4fdd22e3e71196dae2140049d0221d8","ssdeep":"","tlshash":"db2148a5363c19ffa0b15616a87f4764a88fe734340036d9f21ad0a2788c11933a292f","size":1262,"data":"","first_seen":"2025-12-25T21:50:35.67885Z","last_seen":"2026-01-03T08:11:54.243484Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,Cglkb2N1bWVudC5hZGRFdmVudExpc3RlbmVyKCdET01Db250ZW50TG9hZGVkJywgZnVuY3Rpb24oKSB7CgkJalF1ZXJ5KCdib2R5JykuZGVsZWdhdGUoJy5jbGlrZWJ1dHRvbicsICdjbGljaycsIGZ1bmN0aW9uKGV2ZW50KSB7CgkJCXZhciBjb21tX2lkID0galF1ZXJ5KHRoaXMpLmF0dHIoJ3JlbCcpOwoJCQl2YXIgdHVyID0galF1ZXJ5KHRoaXMpLmF0dHIoJ2lkJyk7CgkJCXlvcnVtX2JlZ2VuaShjb21tX2lkLHR1ciwnNDYyMzE1ZWE3YScpOwoJCXJldHVybiBmYWxzZSA7CgkJfSk7Cgl9KTsK","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5208c6087cc73ec32a213bf8c96b078","sha1":"dff5ba9df9ba4ae204181325120d8c9787107b8a","sha256":"2dc285ec053a3afc8161f1baa650c387605c3981992658417811cd65b29c8cf9","sha512":"f4c07222e1ce3248a34344b0912a4b75aba44843f7b7104ae542702ff485d1761e204d7e90ef81d4638951cb670aa80b1d4be05bd2404513be92d46e4127de8a","ssdeep":"","tlshash":"ecd0c22ba79c5871d1347450b93e73497cae14817444e94e9e1848502c9124558b8e3e","size":282,"data":"","first_seen":"2025-12-25T21:50:35.681308Z","last_seen":"2025-12-25T21:50:35.681308Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,ZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcignRE9NQ29udGVudExvYWRlZCcsIGZ1bmN0aW9uKCkge2pRdWVyeSggIi5hcmFtYSAuaW5wIiApLmF0dHIoe3BsYWNlaG9sZGVyOiAiQXJhbmFjYWsgS2VsaW1lLi4uIixhdXRvY29tcGxldGU6ICJvZmYifSk7fSk7","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6129a41b369ce69a621044ecfdddbfe4","sha1":"db816f8fe4b0b617bcd9931ffa144c4ea451fa40","sha256":"eba9a10de329eae77d943980e5c69485dddcda8881fcd481bc83aaa2535a1c68","sha512":"be5f18f1e9f83b806836edc44da81502571160aa4c97d34620deaa31e09bcbf0564e2232264d58e72ff1412f798ec593900e8a4b86bc4e163b2f2454dc3782eb","ssdeep":"","tlshash":"63c02b2eb30ac1f08355f116b1efe3201c3e1057600104051b094c0d8cc4e4045f08bf","size":147,"data":"","first_seen":"2023-03-25T22:29:08Z","last_seen":"2026-02-26T00:16:48.910534Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f941a6b7e0d314e96d355ba964f66ca","sha1":"cc827277b9eb1bad9aa2d9e29b7754565f643734","sha256":"35201dcd9b0075c00a6afe3202e8a21f4b5eeb6edca2c7da628bf76d37c64f6b","sha512":"d6129c0ea4cc6ac424d6fa604659cc0471739b48b2b72272e4723dc1cc56635b65ec73c302f4961a6267ce32607514b43727eeb48a27bbaee467436a7ff56b9b","ssdeep":"","tlshash":"6101cbbaeb5d9dbe93757318b53f736ba92f516039006926c64c2c442c0225b48fa69c","size":707,"data":"","first_seen":"2025-12-25T21:50:35.692536Z","last_seen":"2025-12-25T21:50:35.692536Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/player/checker.php","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79c7eef05781671b048a5a9997f3153f","sha1":"37aceda545e19f2a4f188374ec733ad570332067","sha256":"584e821e043abdddcd70e391b921d6e751a8f213481af80a8638f3f8d7e668cc","sha512":"e5628f9785335af2333c642dc274e3a313072b80bb08448fd6d2cb52b9580aa328151ed1b813590b2b16cb148894e3ed3ffa17b1a42ad9c7203570e3744f332e","ssdeep":"192:aLq4LW7lw19gXcu91YGR1YT7GsKohbQfbYkU46MCjF:aLaCJ","tlshash":"ea62197bdb4c323aaf7a01ea99551ec9ac6d6336274aacb77c0cd143254cd2258fec50","size":15610,"data":"","first_seen":"2025-12-25T21:50:35.45316Z","last_seen":"2026-01-03T08:11:54.222139Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/regretting-you.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/regretting-you.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33392\r\nlast-modified: Mon, 15 Dec 2025 04:34:21 GMT\r\npriority: u=4,i=?0\r\netag: \"693f8fcd-8270\"\r\nexpires: Sat, 17 Jan 2026 20:38:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 609069\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZTZV5%2BAJOy4npaoPU2XcgnfX3z6bPsq4nbQpXbk9bC6jbRjzSICYOBmX2haiin3WnBcX%2B5tw6i%2BEsoVWYdKI2HkKS99uV%2B4mbEBsr2A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d525b0e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33392,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"4c8cdbff1fedf4a8b0fea7783e8902ca","sha1":"d4540d490d5197e8c85d15d08f83de423b580b8d","sha256":"98c135430a07dc9cf65c2781ba81c63e4c302540db424673e56d39fa6e12c51b","sha512":"ca8ef4f909ae68cd3eb854fc2025ebf1d24d37e427f3ef3f65f12e1c9feaea102509e6ff10c681c5595a670046d557bee66b83c4a74842723a6c5e3c563942c3","ssdeep":"768:zd/GOulnuIid8rUIxa/Ftt/QvBL+D6Mrufrf:zd/GOKw+TahIcPuL","tlshash":"abe2e021fea1be92321fd363da8ee6d4b187d6bb774d48850764a39110cabc610f935c","first_seen":"2025-12-25T21:50:35.438739Z","last_seen":"2025-12-25T21:50:35.438739Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v11/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/ubuntu/v11/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ugurfilm3.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Dec 2025 13:31:13 GMT\r\nexpires: Fri, 25 Dec 2026 13:31:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 29932\r\nlast-modified: Wed, 11 Oct 2017 18:22:04 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34016,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34016, version 1.0","md5":"c1777245327bec775fbf955c24b98bc1","sha1":"ff9d81d7983d8d75c215230b9437987cd069281d","sha256":"44e3cdd2862b7ec53f67e2aa2b224c08387ba52a31fcd7b6ee1c59b0514723aa","sha512":"77f042434e9f44e5e29a8f9c4eb6f059cd1352196fc09e7b0ce8e038ea685d9e06308154b0dda3694458d68fca9ef0baa9ef35445d7c84a3125479ec84254793","ssdeep":"768:wyTQxbZi2cU/smwC42IBYodvuxN20oz94O1tI3SsfJarx:w4gbM2ccsmwC49YodGW0oqOQLfJq","tlshash":"c6e2e14fcb11dff6c0d5b23a235423ad44bf5b732cd5daae9538bd4e584f814a018986","first_seen":"2023-04-26T11:30:12Z","last_seen":"2026-03-28T18:04:43.953489Z","times_seen":100,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":20,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/player/play.php?vid=3f5346a3428c636318e7da22478e8e56","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-25T21:50:04.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /player/play.php?vid=3f5346a3428c636318e7da22478e8e56 HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 25 Dec 2025 21:50:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://ugurfilm3.xyz\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; path=/\nSITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; Path=/; Max-Age=259200000; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j3%2BYBwfibZxPPU15sXUafqXt%2Fl4C75FxTv%2F3PR1cLop3GpOteGakUBU9NRDzL%2BpWFOWiNKZUXpaNDkdgD3Vp9arKZYa8HVmnVAH%2Fd0s%3D\"}]}\r\ncf-ray: 9b3b8d4dd8eb76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49434,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":61,"dns":37,"connect":1,"send":0,"wait":58,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/player/checker.php","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /player/checker.php HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yjlA52doOsxwpb31hNFQ4gRjoouHXr3J68YY3xFl3n1o35Tn0j5pL7Bfb7HHP0QdfRAeVcr0XTbGdZuSz3imp8516Gx0%2BChZIXbgLo0%3D\"}]}\r\ncf-ray: 9b3b8d522ae33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15610,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"79c7eef05781671b048a5a9997f3153f","sha1":"37aceda545e19f2a4f188374ec733ad570332067","sha256":"584e821e043abdddcd70e391b921d6e751a8f213481af80a8638f3f8d7e668cc","sha512":"e5628f9785335af2333c642dc274e3a313072b80bb08448fd6d2cb52b9580aa328151ed1b813590b2b16cb148894e3ed3ffa17b1a42ad9c7203570e3744f332e","ssdeep":"192:aLq4LW7lw19gXcu91YGR1YT7GsKohbQfbYkU46MCjF:aLaCJ","tlshash":"ea62197bdb4c323aaf7a01ea99551ec9ac6d6336274aacb77c0cd143254cd2258fec50","first_seen":"2025-12-25T21:50:35.45316Z","last_seen":"2026-01-03T08:11:54.222139Z","times_seen":2,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/betting-on-zero.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/betting-on-zero.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12619\r\nlast-modified: Thu, 13 Aug 2020 01:38:04 GMT\r\npriority: u=4,i=?0\r\netag: \"5f34997c-314b\"\r\nexpires: Thu, 22 Jan 2026 20:12:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 178673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ulpAIUca0%2BjwxO2bURzPH%2Bkf7AyIKTQx6mJ8nevMEWQ7ijPn0YFek8gVQhRMpzJ%2Fpm6ucTTXLOR2k9jZjbtApQtU3CeJfcres%2BxrZDM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d523ae73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12619,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 240x355, components 3","md5":"94bacf5369555dff67b540a127d119a0","sha1":"5a829e8b011d4ad1c3294648d6ebb412b1b54647","sha256":"3eea1c610569da78884ee6858694c503a7f4b3ff25c4844f194243a12f85269b","sha512":"48df2f1d59d88f7b5bf019e1fe8c763d3ef51616b289a872bd9ec2727636d3a5b8b1894dfb0a8fa654e0027af0d684347e2a3b1f6a90428fe40e1aac92b7b9ac","ssdeep":"384:m5bbspyLhyIgrWyJNzt44HlgaIgBdKXQp+zs:ebbspmwrWCNm4LKXQIzs","tlshash":"3542cf898d1493a66cca3bfd6d4007d3e03bf3fee79d2a41b110543beeb9904465d998","first_seen":"2025-12-25T21:50:35.463288Z","last_seen":"2025-12-25T21:50:35.463288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/killing-faith.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/killing-faith.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34790\r\nlast-modified: Tue, 23 Dec 2025 12:44:11 GMT\r\npriority: u=4,i=?0\r\netag: \"694a8e9b-87e6\"\r\nexpires: Thu, 22 Jan 2026 20:12:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 178673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DTE1cyTR7x0T2HtSK3%2BpxDBOhuFXYls3LSLX%2Fz1PuN3sLlKoO8b4rNT9KslUzN1n%2FDowh8C5cOiA7W8aamoDkwsHJzCmbVolLhjLFDI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d523af43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34790,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"4ed36fabacdd3255152b245e709305f8","sha1":"f820c8294b6c39e4ad621209e235d9ac7cbe78d5","sha256":"a6cfed58ac7861da8f1277ca9f93af5cb19722201cdcd57ff5fddcb0ff3d2d9a","sha512":"044b11d96c25959e4a08d2c2b0bf85f0ca9c5cf5cd345b40731a49141c973d7cbf0cbb12b05ecd19ce2cfda8edd111769805f36638a9df74387952709ba44f83","ssdeep":"768:zxe+c8q2qyL2sNUEh5Gf75liS/x6w0i8GnuukttGLGxgr5jl:zxe+C22sNUy5GdlOw00uuXogVR","tlshash":"73f2f2e20deac2e6da0911ff03b4b1ab87efa994e60beb1c5b17190018958d113d6e07","first_seen":"2025-12-25T21:50:35.467665Z","last_seen":"2025-12-25T21:50:35.467665Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/walk-on-the-wild-side.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/walk-on-the-wild-side.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19178\r\nlast-modified: Tue, 23 Dec 2025 12:34:39 GMT\r\npriority: u=4,i=?0\r\netag: \"694a8c5f-4aea\"\r\nexpires: Thu, 22 Jan 2026 20:12:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 178673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AL7NVb%2Fyj1ybaAB1RMpWKzLc5%2BwnXXSF7aOmQFwuYRPT0qO81Pfz9%2BgNYeUmVJ%2Bkj1TP2hvL1uVGX2A4d82yrRP0eGQ8bxEjtjRIufI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d523afb3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19178,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"5bbafa7c5f4df8afe42dd1584081762f","sha1":"d31c5ca41ebce0708a3222fb6228050d52b26c40","sha256":"6803e62e11e32065fff4854e4fcd15912040eb358a09f48f05465ef7caa6d5b5","sha512":"7aced922245f6167d48fb2c268bc2d6a9dcbfdf58fde2e6f2fad0509b64e2f0499e46412387586739460b1841f307631772f9edbe044fdf5e2e829bc63f4d913","ssdeep":"384:zLd3EOblaJUcaCgUaLcoFy0DwbicxV4m6kivqQS:zNEOb02R5f2bT","tlshash":"6382c047518a8ee36954d3e5ff8b168d3bc73f81a9c2bdfe04896fe53b31141284085a","first_seen":"2025-12-25T21:50:35.476544Z","last_seen":"2025-12-25T21:50:35.476544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/rust.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/rust.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26948\r\nlast-modified: Tue, 23 Dec 2025 12:32:51 GMT\r\npriority: u=4,i=?0\r\netag: \"694a8bf3-6944\"\r\nexpires: Sat, 24 Jan 2026 21:50:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G5UCixYsR17iYpj1aUCmTL4pcQuvrSbq0BYDaL%2FCiswUjPkqWDozHfci1kDudNXvPVys8uQYAOWY%2BtfvT3HxRQMPOifZmt%2BU6X%2FQ2xU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d524afd3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26948,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"7dab0eeab63eab5b1912c0fedf5c4d4c","sha1":"5ed589461c075a0fd7a0ee0dd842bea41060dcb0","sha256":"b33080afce6d08bee7e4a7f1b6a70e078a97aa69a065c72345139f38c75f32e7","sha512":"0879bdbcff539753061a7bae2a56b70057dc8ffc1c7d7e7a465b736f164a0556beed61a8dbd62bfad76656b54b0d32b521c195353783f502741266a54fc2a368","ssdeep":"384:z3YQhpn1a1RXdjUxSnw6uWHwfDP9SmSHzZA1nb/izi+yHVWMkvKXMW8jsBBc7Bmd:z3jhpn1kXdjDEz0unb/ie+y1qKXOUz","tlshash":"fec2e1ab3f6572288b005af8fcff26b1b3d9384be44dbb6e14a59774510890c129c6d7","first_seen":"2025-12-25T21:50:35.483532Z","last_seen":"2025-12-25T21:50:35.483532Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/sie-nannten-ihn-gringo.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/sie-nannten-ihn-gringo.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 39334\r\nlast-modified: Tue, 23 Dec 2025 12:24:16 GMT\r\npriority: u=4,i=?0\r\netag: \"694a89f0-99a6\"\r\nexpires: Thu, 22 Jan 2026 20:12:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 178673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zhE5V%2BLrX6HTEv%2BD5OuOYoh6IUXtKtv0gUs7oAqmxzdZCkNmzq3Wyvh9FHO3szcM4HH9ueZKhGUKfKZNzgthdAg8Brm9cid8eMCH%2BLU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d524b023181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39334,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x370, components 3","md5":"2fe48ee09fe18ed474e2ff22f791bb87","sha1":"1d48454b41a43035354a25278e0694f7a5882046","sha256":"fd848c250d16273bc9e99903cd67fcfc5e0fdf8793c1e0a6ca16d1d55d2adb47","sha512":"5dd56c63d70ebd0449a566e30ea6722691fb8a510d8f311dec67a87951301d8f14761ef4b49d42921dc8c75c07dfbb512fadd5c3df8312290e72de6b37c301fa","ssdeep":"768:3jKhjL95jX9V6La4SbRdpKYUtHA90CLklgYcm70cpFHXFmhuzSRFCZ:3jKhDjX9V4sKYUC00sgRm70QuuzSRoZ","tlshash":"a603f19f7b339c8df715642db482f5eb27da48e065e0a242a38defd07a037d16304a59","first_seen":"2025-12-25T21:50:35.4881Z","last_seen":"2025-12-25T21:50:35.4881Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v11/4iCv6KVjbNBYlgoCxCvjvmyNL4U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/ubuntu/v11/4iCv6KVjbNBYlgoCxCvjvmyNL4U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ugurfilm3.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37520\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Dec 2025 15:48:11 GMT\r\nexpires: Thu, 24 Dec 2026 15:48:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 108114\r\nlast-modified: Wed, 11 Oct 2017 18:22:27 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37520,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37520, version 1.0","md5":"8a0727fdaad25826b7f34b1c67bb7ee0","sha1":"4a23047cbfe32e07c8ebf817d9667461b1e173ce","sha256":"0e7ae1ffc31e138ba5c1070a819da9c4af281c2b38e24b20ffdb56d3c8dc4de8","sha512":"03e54c7ed904fdb7d76f52cbcc25c620e340d5a0e2f68793c8825d575cffa541aa87812d9a3847a79b85bc19e825592716604e08dda57271bc5f8dbf97496356","ssdeep":"768:rNZTa8qX8/5P5dIvfi9b+R1ZBJJJzJlc2+NkPy40Cl:rO8qsxPGfi96rZBH3kN+y40Cl","tlshash":"c9f2f19744dedac9c63ebabb43142d53073425287dd1a4922b51773803d5abc8fd2c72","first_seen":"2023-07-13T09:34:30Z","last_seen":"2026-01-03T08:11:54.221051Z","times_seen":4,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":155,"dns":4,"connect":21,"send":0,"wait":11,"receive":4,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/themes/Wpdeo_Star/__cache/Min/css.php?ver=1.2.3","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/themes/Wpdeo_Star/__cache/Min/css.php?ver=1.2.3 HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DzMGlPBS5l4A1qkeo9RnZ7k55NjlT2xH8%2FDv%2BwB0AZEI8TmwFCGAmOHcQcp0r1RZwmqjobdKfBDfqkuqJlPaUUsFMM3m1%2FPDdHFStMI%3D\"}]}\r\ncf-ray: 9b3b8d522ae13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":324039,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"527afbaee1c847244cde4c7a654182b8","sha1":"4aa2e9c5a3cd88ded45d814d8e8a202d93b7a5ed","sha256":"181e458a0525c782fd4ad53878222e02cc55d334fb7c3885ef7aec6678590f57","sha512":"40d4108f8dc75c4489427ca3a5eac7304337ecff81214b3822a4a228dcd8f6353635efa1c6b3398cd87c7879a3a6b23f47db42e6908a8710683f02e1a3ef66b6","ssdeep":"6144:v3nZJZqJynf3PueEkZUp899GNPz4kFXG8gcEB1bpcaoS22Fg/:v3nZJZqJynf3PuPkZUp899GNPz4kFXGu","tlshash":"80648532d55d21acb23ac207fd80bedd31aca217b2131e75fa897539c985ca595327cc","first_seen":"2025-12-25T21:50:35.504051Z","last_seen":"2026-01-03T08:11:54.196772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/themes/Wpdeo_Star/__bgimages/1.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/themes/Wpdeo_Star/__bgimages/1.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 114458\r\nlast-modified: Mon, 10 Aug 2020 17:00:22 GMT\r\npriority: u=4,i=?0\r\netag: \"5f317d26-1bf1a\"\r\nexpires: Mon, 19 Jan 2026 18:53:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 442610\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JVhejLgiFV%2F6HNDU9CDLoLugUODeecOexIU50C67D%2Bihr6IBliQrEJ%2BsuOQKWmiRZo%2BwKHmvEvRlEzpk483rg%2F%2BT%2FV2DTqnv2cJspEo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d523ae43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114458,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=945, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1680], progressive, precision 8, 1680x945, components 3","md5":"43568e87bb2220c2a9b6b62ce83b3d0d","sha1":"fa744a4aa1dba5051fb04af57009527056a01ba7","sha256":"c21f20872cda1cec0186e23988f0c8fd2a19d63de73bdc5a380825f5d5109aa9","sha512":"a07e5f0a1b82356c1c05e9154e7148f081007f49a24edb960a5bc14f29b2a22fd3c561da81fb071f264af5f474340c183274227cba8e2da95dc5fafcd4ff4cd8","ssdeep":"1536:fqy+Zce0/E8hy90V6q2xJbIhq/I+faXVt22men/oyhIrQSI/VdUJ:x+B0/09cuJbIg/Lfa722mcoyirQSI/Ly","tlshash":"18b30201b3b98cb3e4d0e67a55b1dac2d2939ce48277468178ae36497f3d7c1f649283","first_seen":"2025-12-25T21:50:35.509988Z","last_seen":"2026-01-03T08:11:54.188136Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/six-ways-to-sunday.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/six-ways-to-sunday.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26525\r\nlast-modified: Tue, 23 Dec 2025 13:03:20 GMT\r\npriority: u=4,i=?0\r\netag: \"694a9318-679d\"\r\nexpires: Sat, 24 Jan 2026 21:50:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1lnMaDspymeHKVMcZ41%2B20Q%2FHRzCwGcqKD8K3w%2FXtjr15CvvnjYv05yCqTdJe2WvlCeeHuWbxkxg24vCzt8iK2twUExXcj%2Fcp0Hck9Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d523aeb3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26525,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"0d342a2c0a60d1c6fe4362ce05e6e734","sha1":"3de546f490b52d45941d268cc754a8cfa14577ed","sha256":"beb2718cd3a0275e1d01947d777fcb330c6c1dcca9fd68fae812cda3fc3d6fc1","sha512":"de421d507931152b909d9c1756211e0427032dadc79f40276949af83da68a33ade1a69ded6e3b23a139da56037e0818c8dbf943df58b5739fe8c3d4e5bd682a1","ssdeep":"768:zIbI4SqyKdDF1oiFzDOjyZ++1gmDjcyv+dIW:zSI4SVKdF1oiBOjyRumE7","tlshash":"b1c2e147ec96dfd3aa16c1f9e8b9ee8185f5b1e845a0308263706f83e225105466ec2d","first_seen":"2025-12-25T21:50:35.516965Z","last_seen":"2025-12-25T21:50:35.516965Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/avatars/thumbnail_IMG_0920.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/avatars/thumbnail_IMG_0920.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 547885\r\nlast-modified: Mon, 01 Apr 2024 20:48:32 GMT\r\npriority: u=4,i=?0\r\netag: \"660b1da0-85c2d\"\r\nexpires: Mon, 19 Jan 2026 18:53:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 442610\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ywfrvMPcE6%2BWNBWTalT6QVdsDSs10fyGrj2dKaIW5rHmQFLc67ezOsTpYHk2yPBLw8umng4qPPS5juKVMJUn8x%2FoSbTOiIMvTsT1f%2FI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d525b113181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":547885,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1280x1280, components 3","md5":"2f16f269fb15fef943e2e7fbb86a59b8","sha1":"9baed4624ccb7b6b8534bfe068d1ab1d3e3baf05","sha256":"41a27cf6622975a666fa2f63b59476eacb7e4d2a75c3b23d8270e0695776bd93","sha512":"cee5df2bd717f47e21c06ec6c37d663b712949aaf775e6eb087d1900feaaf5856a3af60a0546abd8bc9d087720dff7e0281eef0c25eb7e4cc1de822e3366ed84","ssdeep":"12288:p3BKB5nbUrWyzLQ/tR3/iS2eF657tVPtpGpcX3flslR9LG:pRgVboWsLGD6S2s67ZUpc39slG","tlshash":"00c4335d06f0cc6cfb6fa03730da9b0f87b744eaa56ca9a101856980d77eb13513a17d","first_seen":"2025-12-25T21:50:35.521296Z","last_seen":"2026-01-03T08:11:54.22858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v11/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/ubuntu/v11/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ugurfilm3.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28608\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 11:18:30 GMT\r\nexpires: Sun, 20 Dec 2026 11:18:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 469895\r\nlast-modified: Wed, 11 Oct 2017 18:22:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28608,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28608, version 1.0","md5":"62bb77d9478cf2158a3f59ae69f88d19","sha1":"4c51985370414047206fd1e1a8bf0291027c21f9","sha256":"fd4142d7d5c89ba00f634ad3701c790eb8c8b8f125d45579438cef3ee1a02b64","sha512":"749e26757cf6fec4b9012bc062e7c279b7623f0fc28527600e4ce5ecdb1c3cf50e02f2ae8502be7aacae019caed87d5e0a7163384760d866ad84deadbd8f0b6b","ssdeep":"768:jdcV6ckBpQfHl1CmTfzY34EsE6UZ1hG9xJJXByEhr4atVcY:hcV8gl1rfzYIEHZrG9x3oxhY","tlshash":"4fd2f2af7fd5e173838a303b6c95f73771a577b830dd06c53805958099b500ad8e512d","first_seen":"2023-04-26T11:30:12Z","last_seen":"2026-03-28T18:04:43.923923Z","times_seen":25,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":115,"dns":6,"connect":7,"send":0,"wait":8,"receive":8,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.gravatar.com/avatar/?s=40\u0026d=mm\u0026r=g","fqdn":"secure.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 19:44:01 GMT","end":"Wed, 11 Mar 2026 19:44:00 GMT"},"fingerprint":{"sha1":"CB:34:0E:81:05:DA:71:6A:08:72:91:9D:50:59:C9:0E:4A:64:25:12","sha256":"A7:90:62:A7:12:C2:0D:FF:5E:AD:C2:59:1B:A1:87:D0:CA:F7:0C:75:0E:55:5D:33:B4:95:02:57:C3:90:3B:DD"}}},"request":{"raw":"GET /avatar/?s=40\u0026d=mm\u0026r=g HTTP/1.1\r\nHost: secure.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 954\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar?s=40\u0026d=mm\u0026r=g\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"334c4a4c42fdb79d7ebc3e73b517e6f8.jpg\"\r\naccept-ranges: bytes\r\nexpires: Thu, 25 Dec 2025 21:55:05 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 17\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":954,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 40x40, components 3","md5":"bbf959d8e683550c90ae922aff9145d8","sha1":"426091e7f58fd7884622317d251e9be79346a063","sha256":"04f5604196ae1eee6a914427222b729dd67594b4db797a07f031b5cc3fed4eca","sha512":"d25b6941642be6fce41b000f420ca074775c08c0e70f6c63c00e60b973aea499d0ae73a6a882c4d95f33c517636e3b39dee75059b11cecebf11b9770fb21dec9","ssdeep":"","tlshash":"9311b36baf8313e0ff3791fac9090d85a2ccda4138e05b4267f542908361fc4c86c68c","first_seen":"2025-02-24T06:47:26.753953Z","last_seen":"2026-04-03T18:07:38.101486Z","times_seen":532,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":43,"dns":95,"connect":10,"send":0,"wait":8,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-C4H3WS4T4V\u0026gtm=45Pe5ca1v9225395540za200zd9225395540\u0026_p=1766699405694\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026gdid=dZTNiMT\u0026cid=1594089440.1766699406\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115583767~115616985~115938465~115938469~116184927~116184929~116251938~116251940~116744866\u0026sid=1766699405\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fugurfilm3.xyz%2F\u0026dt=U%C4%9Fur%20Film%20-%20Film%20izle\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1379","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-C4H3WS4T4V\u0026gtm=45Pe5ca1v9225395540za200zd9225395540\u0026_p=1766699405694\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026gdid=dZTNiMT\u0026cid=1594089440.1766699406\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115583767~115616985~115938465~115938469~116184927~116184929~116251938~116251940~116744866\u0026sid=1766699405\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fugurfilm3.xyz%2F\u0026dt=U%C4%9Fur%20Film%20-%20Film%20izle\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1379 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ugurfilm3.xyz/\r\nOrigin: https://ugurfilm3.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://ugurfilm3.xyz\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":188,"dns":0,"connect":29,"send":0,"wait":33,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/page/2/","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:06.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /page/2/ HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F; _ga_C4H3WS4T4V=GS2.1.s1766699405$o1$g0$t1766699405$j60$l0$h0; _ga=GA1.1.1594089440.1766699406\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5UridN9ARkcAdCap9fyuffHRRhxSWNQw%2FBApCE2PeHZDgs947UE5xvacpmtELmn89itz6R%2F0lUzf8VZsPaWTJa09CLwfyYPftK9czJg%3D\"}]}\r\npriority: u=4,i=?0\r\nset-cookie: tg=blue.css; expires=Sun, 02-Sep-2057 23:36:46 GMT; Max-Age=1000000000; path=/\nPHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; path=/\r\nlink: \u003chttps://ugurfilm3.xyz/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b3b8d57fbf33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Site Kit:1.168.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gravatar","description":"Gravatar is a service for providing globally unique avatars.","website":"https://gravatar.com","common_platform_enumeration":"","icon":"Gravatar.png","categories":["Miscellaneous"]}],"data":{"size":48746,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34558)","md5":"7865fc22fd847e1bdf805bc4f4114ab5","sha1":"02cfdbc4f17d5faa381b68c87dbcd40f0f26c239","sha256":"929e2580423bf4637118c0bfef0a8b1b1d4756af9ddd9bbf5e4f313322090a74","sha512":"4b950491405be3d056ec402253f84dfb14a25a02270dc0c8587d53b4098fcacaae382e3ee443e1d4f0dc2406f292c6e5e01d3c479df65891f5632f2e78c7220f","ssdeep":"768:1kYgZdypJnj8joFadkADTC4mR181QceFBaRr1+2QOq:1k3ypJj8YhG18FBaRr1+2QOq","tlshash":"fc23c7b3d675513b1b2ea7d8c686772df1d2510fc9820f16a2fc25c42e8aef2b4d2119","first_seen":"2025-12-25T21:50:35.537978Z","last_seen":"2025-12-25T21:50:35.537978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/murder-at-the-embassy.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/murder-at-the-embassy.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35656\r\nlast-modified: Tue, 23 Dec 2025 12:30:41 GMT\r\npriority: u=4,i=?0\r\netag: \"694a8b71-8b48\"\r\nexpires: Sat, 24 Jan 2026 21:50:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qo51ii8RRWeCQAdMxDzTvgEAbsc2TKcA7nPyPT6bTGYQwEO5raDR9eY%2BTewnabwUqcQIqOVLy6k4L50shwiVaamUFUwIq9Ol%2FV4Bt8s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d524afe3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35656,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"adde9d90e47e8188178ad5b7bdc8c530","sha1":"bfef7d469dac9fe48adf878c9687da016255ebd9","sha256":"e42c7da4f5a6227dc16fae0d42dd94b656aa47a2ccd38bb7b441d880d3239270","sha512":"77dfca65855d4549f328e7d4f19aaeb7c573d81c871824c0d5292b3157fa270be53d9b3400fb07ec81eb8b6dcdf74e68de301f46b47204533a383401a012b597","ssdeep":"768:zgNGVeoMz9vSjxBM264Gr3LdeyAcrNLvykF9bU3BbEYx8qu9XRe:zbgoMmWn53dRA+NLd9b6bELdXRe","tlshash":"56f2e0d84f1733b2685a8e69c91ad10e61eba38035611a8753fec7700eb3e4ae86155e","first_seen":"2025-12-25T21:50:35.543419Z","last_seen":"2025-12-25T21:50:35.543419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/g-i-jesus.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/g-i-jesus.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30521\r\nlast-modified: Tue, 23 Dec 2025 12:20:37 GMT\r\npriority: u=4,i=?0\r\netag: \"694a8915-7739\"\r\nexpires: Thu, 22 Jan 2026 20:12:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 178673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HyeM7315KJa0oYguj1fOmtPeIKClomjjsJaMyiLCgX%2BCkht586%2BnzIVOB0xHk%2FE4U0WOxgDioAJTwycgqLvVmiywR%2BIe%2B%2FofEjj1ld0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d524b043181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30521,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"f658110112acd2c97898e9c11b381c83","sha1":"27dcfb9d0891fa4ae9f36d7a63aeaa50a2dd1888","sha256":"1004efe6725a57a70191b49c43bb57fddac053691d9afde723473b4dbe9f68d3","sha512":"10a647f8d20684f2144ef80ba6efcbcac36b49ac22c91fd7f53fe9bad82f8a5fc8adab3fe729ef62afe911abe761fd9088f728cc08b28cddb82bb7eb4e5e10a9","ssdeep":"768:z35jdiqaPC7uOusSPfgSQMqawRPjn8KJso/kB:zritC7SoSjqxRob","tlshash":"c1d2f18705161bc1f08a34b5df0398649ddb187d3663896f37ba03efc4a87494a7b26e","first_seen":"2025-12-25T21:50:35.550328Z","last_seen":"2025-12-25T21:50:35.550328Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/unizhennye-i-oskorblennye.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/unizhennye-i-oskorblennye.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32076\r\nlast-modified: Mon, 08 Dec 2025 07:36:37 GMT\r\npriority: u=4,i=?0\r\netag: \"69368005-7d4c\"\r\nexpires: Sat, 24 Jan 2026 21:50:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BPn0DU9isra7j1%2BdaGQkn%2FVWmrP2mgrpa0xSpqS0n7RP3%2B6EqK4hnQTs%2Fj59%2B1S58Mcre%2BpH9BCEUZtPl8uLD4%2BJF5d8X6RvCqZCsPE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d525b0f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32076,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"e46ed5feaa29c3e17ad29ed85c37a0af","sha1":"f9be0e75614d8194746792a8c7ee9ec6a62dde53","sha256":"bd08e5e502517ef298bdb6b0e754b2e364a57d7cb893156c7d85a19cf3b03d4f","sha512":"e4f7c044b69600201d50ec9df9836bd3c09c267430fb7adc26aaf6ad63fb740541b84dbcb89151f0b01450bb560e8858c223d8eada651e44890bd29d17752651","ssdeep":"768:zUMZanqvgwffshq8HE6oRZ7SoIQnNllrPtxFXygSO:zH3vhOE6oRojQnNvrPX","tlshash":"45e2f14b47226dd45cb0829dc59d39dfc3f9a9a6c00bf18b6ceec32aa417c84d959053","first_seen":"2025-12-25T21:50:35.554118Z","last_seen":"2025-12-25T21:50:35.554118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/the-lineup.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/the-lineup.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33781\r\nlast-modified: Mon, 15 Dec 2025 20:19:50 GMT\r\npriority: u=4,i=?0\r\netag: \"69406d66-83f5\"\r\nexpires: Sat, 24 Jan 2026 21:50:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dpiJa6lwTXm%2FpTrcXCqRimAkFHxLNIoPThuyAu3C4s6A4Vh%2BM3Zgk70rNcuZVf%2F2iefufKYbJa9aIDYmInLE5dactLcVf6QcqY8Dc9E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d525b0b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33781,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"7c9c76c72c154cd05b8d46fa96f05b3d","sha1":"2df167d716e6ec3abdd7725ab9502c03cbae8b42","sha256":"10b8c1f103487324d887149e0f8190365d80d01bd7fb0c08aba0164a29dd9910","sha512":"2a20a50e9aa64abc705c8dfbea88479cc57d8594acfe4f04ec64f0eed2edb8993cbf177dff548ff4669eac7de00373b595dfc55e7ad2e9f5cde28d74b3263c8d","ssdeep":"768:z3xuArkvyjohQC/gHKeSS8SbOZ7/7p+wwd+:zYAYMQQFKe/8WOFowt","tlshash":"c0e2e0176a36418a9b523881d3f7464673cd2d28c728533e3168cea2c7d9629a4bff85","first_seen":"2025-12-25T21:50:35.558042Z","last_seen":"2025-12-25T21:50:35.558042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/avatars/Cartoon.png","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/avatars/Cartoon.png HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 170432\r\nlast-modified: Sun, 29 May 2022 08:36:05 GMT\r\npriority: u=4,i=?0\r\netag: \"62933075-299c0\"\r\nexpires: Sat, 24 Jan 2026 21:50:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r2Jl%2BFcusIJD91EF0qJ7q5UZm9qEtiAhotAhNOnP5ue%2BosPB30%2FH7n8WdwWiLbZS%2BMLRyDHbgz2flZuyoZLBMIqIlWUXsVxp%2FacF4y4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d525b123181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":170432,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit/color RGBA, non-interlaced","md5":"de4e0f3448da685f0b0ccac29751919b","sha1":"3d71969ace1bb174a0dbe3d92a780b6f74b85bd8","sha256":"a43fba507518f5fac65ff3e178fc80bd3ce96f0966e529f525b13dca295d0025","sha512":"54d460160f88ca185770d6c3c41e9f6d45e654ce446da60a4918060ce5bc1b0c2428b9e1bcc9e334478f5e6210c4716078447888650c308823b51fa18c502ecf","ssdeep":"3072:FdhdLKdK9cnKGRK1UTAVOdkfQbdF9xTHj5eKh6D2o3RFQ45suAk53QBh:FbdLL2KGECwOzZJjNk3vQ4OuA1","tlshash":"27f323f5e342ac537948f9a93353e2d83c9e11e3ce6e81e4e424504b4ae751df80b8b9","first_seen":"2025-12-25T21:50:35.564918Z","last_seen":"2026-01-03T08:11:54.182951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v11/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/ubuntu/v11/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ugurfilm3.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Dec 2025 13:31:13 GMT\r\nexpires: Fri, 25 Dec 2026 13:31:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 29932\r\nlast-modified: Wed, 11 Oct 2017 18:22:04 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34016,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34016, version 1.0","md5":"c1777245327bec775fbf955c24b98bc1","sha1":"ff9d81d7983d8d75c215230b9437987cd069281d","sha256":"44e3cdd2862b7ec53f67e2aa2b224c08387ba52a31fcd7b6ee1c59b0514723aa","sha512":"77f042434e9f44e5e29a8f9c4eb6f059cd1352196fc09e7b0ce8e038ea685d9e06308154b0dda3694458d68fca9ef0baa9ef35445d7c84a3125479ec84254793","ssdeep":"768:wyTQxbZi2cU/smwC42IBYodvuxN20oz94O1tI3SsfJarx:w4gbM2ccsmwC49YodGW0oqOQLfJq","tlshash":"c6e2e14fcb11dff6c0d5b23a235423ad44bf5b732cd5daae9538bd4e584f814a018986","first_seen":"2023-04-26T11:30:12Z","last_seen":"2026-03-28T18:04:43.953489Z","times_seen":100,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":168,"dns":1,"connect":8,"send":0,"wait":15,"receive":3,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.gravatar.com/avatar/b85f2f631f1f761ffc0b6097a576ca6e90b039c10f5c84a2d44588096d5a445a?s=40\u0026d=mm\u0026r=g","fqdn":"secure.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 19:44:01 GMT","end":"Wed, 11 Mar 2026 19:44:00 GMT"},"fingerprint":{"sha1":"CB:34:0E:81:05:DA:71:6A:08:72:91:9D:50:59:C9:0E:4A:64:25:12","sha256":"A7:90:62:A7:12:C2:0D:FF:5E:AD:C2:59:1B:A1:87:D0:CA:F7:0C:75:0E:55:5D:33:B4:95:02:57:C3:90:3B:DD"}}},"request":{"raw":"GET /avatar/b85f2f631f1f761ffc0b6097a576ca6e90b039c10f5c84a2d44588096d5a445a?s=40\u0026d=mm\u0026r=g HTTP/1.1\r\nHost: secure.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 954\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/b85f2f631f1f761ffc0b6097a576ca6e90b039c10f5c84a2d44588096d5a445a?s=40\u0026d=mm\u0026r=g\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"b85f2f631f1f761ffc0b6097a576ca6e90b039c10f5c84a2d44588096d5a445a.jpg\"\r\naccept-ranges: bytes\r\nexpires: Thu, 25 Dec 2025 21:55:05 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 17\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":954,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 40x40, components 3","md5":"bbf959d8e683550c90ae922aff9145d8","sha1":"426091e7f58fd7884622317d251e9be79346a063","sha256":"04f5604196ae1eee6a914427222b729dd67594b4db797a07f031b5cc3fed4eca","sha512":"d25b6941642be6fce41b000f420ca074775c08c0e70f6c63c00e60b973aea499d0ae73a6a882c4d95f33c517636e3b39dee75059b11cecebf11b9770fb21dec9","ssdeep":"","tlshash":"9311b36baf8313e0ff3791fac9090d85a2ccda4138e05b4267f542908361fc4c86c68c","first_seen":"2025-02-24T06:47:26.753953Z","last_seen":"2026-04-03T18:07:38.101486Z","times_seen":532,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":39,"dns":96,"connect":8,"send":0,"wait":8,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.gravatar.com/avatar/990097e7815602b7d921eb05a44f9cfc909c85c1b91ac0c3754ff15bd818cd17?s=40\u0026d=mm\u0026r=g","fqdn":"secure.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 19:44:01 GMT","end":"Wed, 11 Mar 2026 19:44:00 GMT"},"fingerprint":{"sha1":"CB:34:0E:81:05:DA:71:6A:08:72:91:9D:50:59:C9:0E:4A:64:25:12","sha256":"A7:90:62:A7:12:C2:0D:FF:5E:AD:C2:59:1B:A1:87:D0:CA:F7:0C:75:0E:55:5D:33:B4:95:02:57:C3:90:3B:DD"}}},"request":{"raw":"GET /avatar/990097e7815602b7d921eb05a44f9cfc909c85c1b91ac0c3754ff15bd818cd17?s=40\u0026d=mm\u0026r=g HTTP/1.1\r\nHost: secure.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 954\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/990097e7815602b7d921eb05a44f9cfc909c85c1b91ac0c3754ff15bd818cd17?s=40\u0026d=mm\u0026r=g\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"990097e7815602b7d921eb05a44f9cfc909c85c1b91ac0c3754ff15bd818cd17.jpg\"\r\naccept-ranges: bytes\r\nexpires: Thu, 25 Dec 2025 21:55:05 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 17\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":954,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 40x40, components 3","md5":"bbf959d8e683550c90ae922aff9145d8","sha1":"426091e7f58fd7884622317d251e9be79346a063","sha256":"04f5604196ae1eee6a914427222b729dd67594b4db797a07f031b5cc3fed4eca","sha512":"d25b6941642be6fce41b000f420ca074775c08c0e70f6c63c00e60b973aea499d0ae73a6a882c4d95f33c517636e3b39dee75059b11cecebf11b9770fb21dec9","ssdeep":"","tlshash":"9311b36baf8313e0ff3791fac9090d85a2ccda4138e05b4267f542908361fc4c86c68c","first_seen":"2025-02-24T06:47:26.753953Z","last_seen":"2026-04-03T18:07:38.101486Z","times_seen":532,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":38,"dns":94,"connect":10,"send":0,"wait":8,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/blindsone.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/blindsone.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15973\r\nlast-modified: Tue, 23 Dec 2025 12:25:34 GMT\r\npriority: u=4,i=?0\r\netag: \"694a8a3e-3e65\"\r\nexpires: Thu, 22 Jan 2026 20:12:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 178673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJB%2F2YjHd%2BbaMfLf2ke1FJdEngomfUfTOboXtxJv5YDMf%2BZqlJAK52NXHGPZeNaDRko3akBRO8%2BqJtDdSuvpwkfffl66aWBY3LoTmzw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d524b013181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15973,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"4c31b347e1ff5fbf1271843f2e5ec3e5","sha1":"48f2af875db9d92ef58eae3dd1086400c8e85cff","sha256":"aa8995da605b9976e2325df2bc4bd2357d64d746c51266283584e7bcdce322bb","sha512":"92ffdf47b24aae77e6ed3d0c97a75b5de8358e38f8cb555775b555039d6a98483a3443f897ee74ee3e95ab740ce4f259dc343c8935fe89c1490a2ac0fd504384","ssdeep":"384:zGi/C9DOCL1tV03h4xIy13LylZ3voyw3p:zdCr1ty3h4j9LaZ/oywZ","tlshash":"7672c1996211bbd3d42ac977f98300f941efb4aeab97722ee11ee38bb15413c1842574","first_seen":"2025-12-25T21:50:35.569603Z","last_seen":"2025-12-25T21:50:35.569603Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/baksu-chiltae-deonara.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/baksu-chiltae-deonara.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 39505\r\nlast-modified: Mon, 15 Dec 2025 20:27:13 GMT\r\npriority: u=4,i=?0\r\netag: \"69406f21-9a51\"\r\nexpires: Thu, 22 Jan 2026 20:12:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 178673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YXyjgEO7qNy9X6sISfqwE3SfAub3fGHugdEfgzax%2FbuuosDOUrhgNL5jELn1ZOzijPZ5F7K9TMv9TXM9TV2SdI7OIqOa4wtRwuhFlFo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d524b093181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39505,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"2df99e4b3cd877c2105f2f044b231439","sha1":"64938240fa6f1826873dcb12873996762b0272db","sha256":"e0901d15912dbd0438e76d711968ef5fa6abcc51e553bebc2a23c9d7db49908d","sha512":"2a392d0cd56504db84b1a35091cfcc968058395d195a17e3fd337f1418c5bfc2858cd46a4a5830b73f2f0ca10e86898d0dbeb5ee8f29a244e47a310fc7d361a1","ssdeep":"768:zdJXiRpvD8yMS8D2DtYVtxRPW87q4g1Y0w3lyKFQinKON:zLiRpvwvEDt0t+8aq7ubON","tlshash":"8f03e12e1b83c72bb1b782dac03949a703eb99730d71198c95598276fdad9c36cf458c","first_seen":"2025-12-25T21:50:35.574234Z","last_seen":"2025-12-25T21:50:35.574234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v11/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/ubuntu/v11/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ugurfilm3.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28608\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 11:18:30 GMT\r\nexpires: Sun, 20 Dec 2026 11:18:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 469895\r\nlast-modified: Wed, 11 Oct 2017 18:22:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28608,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28608, version 1.0","md5":"62bb77d9478cf2158a3f59ae69f88d19","sha1":"4c51985370414047206fd1e1a8bf0291027c21f9","sha256":"fd4142d7d5c89ba00f634ad3701c790eb8c8b8f125d45579438cef3ee1a02b64","sha512":"749e26757cf6fec4b9012bc062e7c279b7623f0fc28527600e4ce5ecdb1c3cf50e02f2ae8502be7aacae019caed87d5e0a7163384760d866ad84deadbd8f0b6b","ssdeep":"768:jdcV6ckBpQfHl1CmTfzY34EsE6UZ1hG9xJJXByEhr4atVcY:hcV8gl1rfzYIEHZrG9x3oxhY","tlshash":"4fd2f2af7fd5e173838a303b6c95f73771a577b830dd06c53805958099b500ad8e512d","first_seen":"2023-04-26T11:30:12Z","last_seen":"2026-03-28T18:04:43.923923Z","times_seen":25,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/muhammad-the-last-prophet.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/muhammad-the-last-prophet.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27217\r\nlast-modified: Tue, 23 Dec 2025 12:10:13 GMT\r\npriority: u=4,i=?0\r\netag: \"694a86a5-6a51\"\r\nexpires: Thu, 22 Jan 2026 20:12:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 178673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NuedB%2FQrFSr%2BTUHSOUgcRP5yhrdtRF%2Bg69nsd5hBwgKRKzCpjqOGpxrKtPcbyH3E1v6fEmtfug%2Bh1sqQgE%2FP74QiiRrT7a7a88m32ks%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d524b083181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27217,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"9797e6a27c5c593018ad6d89837839da","sha1":"7e750ed841d53c815381c34455dd2e6c23210d0e","sha256":"1969a5185eda1f8f369dfe210b5bfe75e2cd4569d9d16150d116fa0ce48cfe22","sha512":"8ba9d624452d2874e381bfe6ff9f5f51d15784dc54a9652da4056b95d265bc66156c7db2c1119d576322e71186930bd8ccc0a2393e838d819f096c66f0432293","ssdeep":"384:zjULMqaEd8nzgkXznFfg9JYULoUiZ0r1pFmYxkm8PfuENw9zjTAC3YrTW:zjU/aPgkXz4bEUBZpwukjPfNQk1fW","tlshash":"5ec2e1350d11ebdc98421c61e5b7b64652ca5ea6ab99fca07130c7cd0d4bb14f2f0eaa","first_seen":"2025-12-25T21:50:35.578846Z","last_seen":"2025-12-25T21:50:35.578846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/ugur-4.png","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/ugur-4.png HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 3329\r\nlast-modified: Wed, 07 Jul 2021 23:03:35 GMT\r\npriority: u=4,i=?0\r\netag: \"60e632c7-d01\"\r\nexpires: Mon, 19 Jan 2026 18:53:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 442610\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qmB3Je7K7fRsFGUUAjl%2BvzUGeU9luJhbo8w2TWRZC7N4jyDSo%2BVHLotygv9H7iFAa%2Bt3p%2BajxnLGvj0AlHTDMfT1ru5TxJ1HX2PMyWc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d523ae53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3329,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 245 x 46, 8-bit/color RGBA, non-interlaced","md5":"6026b97822bdc2d050305d4613497424","sha1":"fa51ffdfea44ce2eacdf360c81ba42504e1c84b9","sha256":"e65d64cef355978e5db107fe1e1f2af1f5322d19730286bf616332e4db36c196","sha512":"45ee742000120a387ac5ca956515629ae06c82410e106a6f928e91b84e0870718ec1ed4033cfed45bd5166de731f373acc40b21d88fa57c745301b4816018b58","ssdeep":"","tlshash":"66612b965c7112e3999f9b3a0cea39a589534645d041921d78c3dc035e541c3a7ae39b","first_seen":"2025-12-25T21:50:35.584066Z","last_seen":"2026-01-03T08:11:54.206766Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/the-juggler.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/the-juggler.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 39463\r\nlast-modified: Tue, 23 Dec 2025 12:46:14 GMT\r\npriority: u=4,i=?0\r\netag: \"694a8f16-9a27\"\r\nexpires: Thu, 22 Jan 2026 20:12:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 178673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DtnAn5rifWML8QRd0NBZC01f2kU%2FI5kopj92tv8toPlbMxDruIoWOBQCRqha84g9TJGobeA2GIG4xR2XpSoqv7asyQZPeJHbufsW7HQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d523aec3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39463,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"5fbef927f242abeb5bef0262b801727b","sha1":"861fe8401a5b6a73a48c1ec1dd5277326b360e95","sha256":"b31371ce26222a006e320343caf22e6f96f3492ed4110f5deee8ca2eb54ed4fb","sha512":"38c837e4a63fedbdd8bf3cd4ff5f99655dba21787b68c22ad79cbca46b6cb605be7512580ce368ae0eddf557834ce85eb4e53aaa3a48bfe2d135cc30f52d55b4","ssdeep":"768:z21CMivpHgQhZB6CzU1LjOVNmif/AFDcKYZTVVmEWRctK0uOyYZdJulPolb:zrBpAQhKGYfOmdQKU8dRctxuzque","tlshash":"a403f1bf8a3443cff97e0c81cecc255a1bcb172a8b29df6a25763f7480d51853888548","first_seen":"2025-12-25T21:50:35.588729Z","last_seen":"2025-12-25T21:50:35.588729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v11/4iCs6KVjbNBYlgoKcQ72j00.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/ubuntu/v11/4iCs6KVjbNBYlgoKcQ72j00.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ugurfilm3.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 46580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:47:55 GMT\r\nexpires: Sun, 20 Dec 2026 10:47:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 471730\r\nlast-modified: Wed, 11 Oct 2017 18:21:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46580, version 1.0","md5":"366417c7fceae9f0a9ab862afe3a859d","sha1":"b49a6ff2272ba97e6fee688311fa2b7a6c8315b8","sha256":"c48f333a02b5f55412ac48244b995492cd0676b654bd1bc25c03c312c68e93f0","sha512":"4969850d7788369271d49d1e904f7cf33a93a20cba00746b2ad5e129e02a4fe1695f23c386174e5a70e153a9ae72c1707ef1be6e112a9481de945b19c4a0231a","ssdeep":"768:qRDCPOt1N9kH0TCkK2eb9A6FwnGJA4bdUwns3gFFnC6E4Fh178G8hCR0e9bSFq5a:qR1t1LkeCWehA62nGJlbqwnsA1N8FCRc","tlshash":"6523f1d64d6750e2a9420df54fe60a312ee39065bf2c01ee2b2d3507649afdeac93813","first_seen":"2023-05-24T01:17:28Z","last_seen":"2026-03-22T12:30:57.585831Z","times_seen":66,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":153,"dns":1,"connect":8,"send":0,"wait":19,"receive":3,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/themes/Wpdeo_Star/__cache/Min/js.php?ver=1.4.7","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/themes/Wpdeo_Star/__cache/Min/js.php?ver=1.4.7 HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uxCdxJpeTuJ1tt1W8iJdi5FONRaWU1QeWtVsNGMqnVNbRdrzJ%2FUe4JqbMwMqiJTzhF9pa%2FF1ZmZySZq3ZrDTDZFqspikAfSc%2BnoPHBo%3D\"}]}\r\ncf-ray: 9b3b8d522ae23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":692967,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"cedefbc41fce179c078d7c6d42f41dbe","sha1":"826e0faf8b1b2b42dc11b0d94abeb6a0d3f0ec08","sha256":"7764a2e4d9eeffad6379d0b5597c20e97d10bb782b50d79e3c386bc31f13e7c5","sha512":"450b8d342fb4b198a382b6dcc2d70a33efadb60f23a2b1c3b789d0f89340fcba6019a0ccb4d70f0aa672db11646f098947f1495cd2ec91e21252211ba05ec93d","ssdeep":"12288:acG+nXNolxTQIcVU9zgfLzRA6amfuheEPQVE3IH3eN5ZC/pwqryNj3b:acG+nXNolxTQIcVU9zgfLzRA6am6eEPv","tlshash":"fae4094972b53226427771b5a42f220fb23a9158b205c25cb05e86dd7d68c34a1fbffe","first_seen":"2025-12-25T21:50:35.598417Z","last_seen":"2025-12-25T21:50:35.598417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/baby-blue-marine.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/baby-blue-marine.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37222\r\nlast-modified: Tue, 23 Dec 2025 12:37:22 GMT\r\npriority: u=4,i=?0\r\netag: \"694a8d02-9166\"\r\nexpires: Thu, 22 Jan 2026 20:12:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 178673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mXy6RoDmwDaGn%2Bepmve4NtVf75WP%2FhiHJuhRR07FlT2iXrqQWt0CGX9zJbT6344S%2FmRp2YxqUExEzTBm5YBy4Be%2FBTtw21q6YaU%2FAQU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d523afa3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37222,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"fd49288c6b3af87365191c8bd8705be9","sha1":"bd1b698e65d084de70c378b16d3b4e770596670e","sha256":"d681f042496e4f94bb95a5822827e4f46d2e2f81723de75bd86418130851a65c","sha512":"c303d320f51b87552739de151a35f7b4ef6a115824abfb2042186005d06d9f1e0b185880ce54a8f0c12a7b327609f61ee996a7842e806455e76f79d7cae2b8aa","ssdeep":"768:zaCTgYnTehFcZ9Ja1ZA4UFFr2Z9oeqLoRb2o52bpCDDgmyW5mTGQ:zhgYTeh49JsZA4iyYrLoxIp3pchQ","tlshash":"0cf2e114470f49dbea92426ff44767d1aecded11763d813996022b838b28b7c8d582f6","first_seen":"2025-12-25T21:50:35.602324Z","last_seen":"2025-12-25T21:50:35.602324Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/miles-from-home.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/miles-from-home.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33505\r\nlast-modified: Tue, 23 Dec 2025 12:40:55 GMT\r\npriority: u=4,i=?0\r\netag: \"694a8dd7-82e1\"\r\nexpires: Thu, 22 Jan 2026 20:12:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 178673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=87eR12bXPiMEeS8ns%2BzXmKqUdDLKiVdwd55x9iOPGgE8%2BrgJoyqn6lD71e1CbNNigxgY07%2Bk0cEnTuDhXPRXtVEV9TGW7uHwLHGU4u8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d523af93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33505,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"7724dfa590bfedff4d77ff50a61d2eef","sha1":"728ebc2bf17806169d454658cf2d0392b5c29d25","sha256":"c24b6e842e14fc279ff6993a5dd45ed9d4919bc62ac1beedbfa4c497a10868b9","sha512":"36f1c62e2addac214ede54805e31248413d8f624646160b19cfcf73b156c2052f680d9245bdcec4b34f93911c54963a3bf852227652253ee0ad214eeb12fabd1","ssdeep":"768:zIOm/4DZbknTjATeuLtq7CmPC74NBV0C1t2ea13+YW4FjT2IKd:zIOm/QIVuBmHHnXt0W+2x","tlshash":"c5e2f1d79307b654684d50bbca7c7bd99a88067cea70847993240b42f371f87f54ed82","first_seen":"2025-12-25T21:50:35.606325Z","last_seen":"2025-12-25T21:50:35.606325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/shark-terror.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/shark-terror.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35544\r\nlast-modified: Tue, 23 Dec 2025 12:17:33 GMT\r\npriority: u=4,i=?0\r\netag: \"694a885d-8ad8\"\r\nexpires: Sat, 24 Jan 2026 21:50:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wR6r%2BEmZSgG%2FcS24GMLLLIOcbTlhnFlLu9WxmDrjRF697dPIxFwHDqpRnHbs8jdmbSnqvjOMRzq7mhj9Xgnpn97sAme6w8SZjGWda5M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d524b053181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35544,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"96d520d0bda0945fec9af5845c7995f5","sha1":"7a8dd5f9e7b7e9d34e6fc1e3597dee9002bddac2","sha256":"62702bf2b39249061d249ad9b347857d2899eac00c5e5afb8ff7db1e7e29076d","sha512":"c41c403bb05e43cefb123880dfeffb74857240e8f8a89443aad973f7f5d040763ae99d80db8b294038cea1a03afe7910a73381564f049ff635ff8b51d75a21f1","ssdeep":"768:zSjQfEL0sZnKakq9ErHv5MIS/GCqUWB61uj:zy0sZnrT8k/tqUDo","tlshash":"9df2f1e041627e792f05d2bdcca5d4f0beff89c51ecac6981ba03be4a3424d15a34c95","first_seen":"2025-12-25T21:50:35.60941Z","last_seen":"2025-12-25T21:50:35.60941Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/looking-for-mr-goodbar.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/looking-for-mr-goodbar.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24999\r\nlast-modified: Tue, 23 Dec 2025 12:13:18 GMT\r\npriority: u=4,i=?0\r\netag: \"694a875e-61a7\"\r\nexpires: Thu, 22 Jan 2026 20:12:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 178673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b0zE2NJ2H1JOB4FdhgS%2BBi5kDx8pLciLaRwxCPtlNMH5KAsZDqYPB4vLqaHIM9eNhp03J3i7Yyp3uL08g7zi%2Fm1xc1oHCfnjjmUTOBE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d524b063181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24999,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"8f2b10a9e9151e0aa17c700d9b186242","sha1":"35634d083dcbd089795397047d5d7f901ac77f70","sha256":"8de847b0d44b292e459962251174921a467ab2b2b8ae445435346413007ae745","sha512":"476dae9f7dbf6199eda587b38cf0114a77501588b31dc3b301cee72235ac81db65790653c4e7323be2b6ac3dd3ac0d56d6660dade7b93943e17492a08a46db7e","ssdeep":"384:zJ1MDqF/gQmzOhNQbDryOPl8fKp/PeD3BQWtSJi7SZ91SPbk4wsMx+O:zJ1ZFIQvhNQzzP3/2D3Bdt57SfkPQ7sM","tlshash":"4db2e18a6f2917b73e68d0bac74085f4b5d46472b60b43c35cbc99a874caea44dc24fc","first_seen":"2025-12-25T21:50:35.61593Z","last_seen":"2025-12-25T21:50:35.61593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/body-count.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/body-count.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33444\r\nlast-modified: Mon, 15 Dec 2025 20:23:26 GMT\r\npriority: u=4,i=?0\r\netag: \"69406e3e-82a4\"\r\nexpires: Thu, 22 Jan 2026 20:12:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 178673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PMhVF4mQBPHlMXmxiEXjS8d%2B2gxBGqaXZ6KU40%2FsQSfA1IrHhBm%2F4uZmnXlN2Sy7qJYif%2BDONWPDAABm6K4wXE%2B%2BZSQU0rflUupGioY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d524b0a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33444,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"854c196dcf68c80e74a3d3424c015171","sha1":"b389d8c08c32141c552d66eb173e06494543e97c","sha256":"c679ca2e19bfda3ea3b05cdd690fe8dda7af5fe8aea00ccc2d3caa0f36f46f52","sha512":"4ff0f968c9c2c33a493eca161c44ef9587578c5845943a8a659ff322fad4e6a808db6c701ca964e2dfdbe2ee502f7442bf85265c9e87ae9a7ca1c4df37a015b5","ssdeep":"384:zWx6WooUmQoKUE7uKQsRMXDpXMt9d7UAr56aPtg1prJ+UimDkqLFoWQVs4n8wdbs:zwRPYMzS9lU3/prJzQqLWBs4njdb8P","tlshash":"48e2f1241e8fbed40968bc5aec4e5413d7e71fc378a9608d68d3970842e3ee9494a5dc","first_seen":"2025-12-25T21:50:35.618967Z","last_seen":"2025-12-25T21:50:35.618967Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/themes/Wpdeo_Star/__front/images/sprite.png","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/themes/Wpdeo_Star/__front/images/sprite.png HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/wp-content/themes/Wpdeo_Star/__cache/Min/css.php?ver=1.2.3\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 10404\r\nlast-modified: Thu, 10 Dec 2020 07:19:40 GMT\r\npriority: u=4,i=?0\r\netag: \"5fd1cc0c-28a4\"\r\nexpires: Thu, 22 Jan 2026 20:12:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 178673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BZjxVQu9tGfJ4LveklolQO1hgg6f%2BjjQrnqZPHT5xRTQ1nuIB9%2Fp%2BxnX2Rcr%2FjN3m74BIexvBTt7zv3RGnEwI1bJ5VigFUHZ7kftZlg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d53cb3f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 615 x 120, 8-bit/color RGBA, non-interlaced","md5":"abe6027dd6a7dcb86e968ec0ae751408","sha1":"bd7da483a136449f197d2b0653f05fddbf0b90c4","sha256":"eeea0ba9f69def0f86206b7636d6bea568c77f9ac7ce8f546698aa6d8a67b001","sha512":"dec9e698f4411782d64f4bd4194c801142791ecca9042a55cf96ec5a1f3d75609cf3c6f503c9bdbc7bc3aef3bfdd0c9ede2a35260ec9e728ba4adfdf453a1527","ssdeep":"192:99VKJc8iOXfd851LaD/csfL7FoH2hX7j2Hrd4spSROI6pzyIuI6i6E6S:n4dd85i/h700mCspMncBuIuS","tlshash":"9022afb633cf45abdb92aff99a7017e917c241220608a5624d745f3c8f9015e9d2732b","first_seen":"2023-07-13T09:34:30Z","last_seen":"2026-01-03T08:11:54.184032Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/themes/Wpdeo_Star/__front/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/themes/Wpdeo_Star/__front/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/wp-content/themes/Wpdeo_Star/__cache/Min/css.php?ver=1.2.3\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\nlast-modified: Thu, 10 Dec 2020 07:19:32 GMT\r\npriority: u=4,i=?0\r\netag: \"5fd1cc04-12d68\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kGbyOrFQ3qN6j1VrMQ3gKmwbXbeHzzMOEPYzVvYknkyje31cdYp1Z%2B0QkmODyOF8LoqkLh4bhOlAB4I2kOhgZILinOg3FoBlIONxuMg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d53eb4d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-04T06:44:35.794562Z","times_seen":410205,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/shoot-the-moon.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/shoot-the-moon.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27324\r\nlast-modified: Tue, 23 Dec 2025 13:06:23 GMT\r\npriority: u=4,i=?0\r\netag: \"694a93cf-6abc\"\r\nexpires: Thu, 22 Jan 2026 20:12:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 178673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2B0Hz8yl4NKbxmfcZaU7B0O6tBsUg9e2VI5f%2FujCo%2BXzq8IqiLs0ZPPkAf6EmafqvAq7VWOnuMFUhnLYD5ftp74uZObw8FYQ3sS3QT8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d523aea3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27324,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"ceb92cdbaf44f610766bcd38b694ce72","sha1":"722db1535ad148a0015b9e6880426096e89dbec8","sha256":"f1c987411e6a6b1856afb1b27bdbce327830c53f4da6ec84f25fc64ed698cda2","sha512":"daab4578ab9f03e4524a1764dd9e7b52f6d1b016cba5fa5a171547569a9eb2fc49eb30ce6ef4e463c703c7d84f0b710cfdeefed7574b19602e83aefafa79d05d","ssdeep":"768:zxXtISDQSmYO7xhmt+mr7/wHjgs1Ox95RoIj4tvh:zxXG2OrDk715oIEtp","tlshash":"34c2f10caa1d00c8cd255ca5e475ae7ad9fe1180bff0e2ba7f04525d51f92164bbdc28","first_seen":"2025-12-25T21:50:35.627836Z","last_seen":"2025-12-25T21:50:35.627836Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/wer-war-edgar-allan.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/wer-war-edgar-allan.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21425\r\nlast-modified: Mon, 15 Dec 2025 20:16:58 GMT\r\npriority: u=4,i=?0\r\netag: \"69406cba-53b1\"\r\nexpires: Sat, 24 Jan 2026 21:50:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u5HXYC0KIz%2B9KuRtVIU4pFJxD9faQIPt5zjWWHUF2J9Ot%2Ft6cvRieRsrn%2FNCNqBkQVFt7XNhSpr3RHuJQdmUJdFpDlHtubpASzRqoyU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d525b0d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21425,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"32744a63a5401128677945301874b58d","sha1":"3771ce73a10b5d48df56e060362a435c863782f5","sha256":"65424f7202d8f51823c0d100c16a2f4a0d5108fc58a59d20451de86d6ec2ed3e","sha512":"6b575f7276fc17d8d854dcd6354b002c1f419cdb06519448f5184707da3f606919d1745247c8c1bd0cd916cd92ff278eaf729e321df55d5c252e697ae9a6b948","ssdeep":"384:zGa7/YZZstF+Ef79v9p8a7JPjiPIonh5yJoh86ZbmBZHekjo09sXEx:zf/YZZstF+Ef7tnFJPjkb2c8fbh7sW","tlshash":"25a2e1a5f0397aeefe037ccc23d455a801ed12db6fa0b8cd271d52c0664ce25d884e51","first_seen":"2025-12-25T21:50:35.631543Z","last_seen":"2025-12-25T21:50:35.631543Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-C4H3WS4T4V\u0026cid=1594089440.1766699406\u0026gtm=45Pe5ca1v9225395540za200zd9225395540\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115583767~115616985~115938465~115938469~116184927~116184929~116251938~116251940~116744866\u0026z=1553205299","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:59:28 GMT","end":"Wed, 25 Feb 2026 15:59:27 GMT"},"fingerprint":{"sha1":"26:28:32:29:0D:EC:7C:A6:70:C6:B4:55:22:40:CC:C6:C2:BE:44:6D","sha256":"BA:6B:58:64:89:F9:73:7D:3A:37:E9:08:D4:E1:6A:49:39:B9:EF:6C:43:F6:DC:F5:92:3D:2C:1E:95:7E:10:94"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-C4H3WS4T4V\u0026cid=1594089440.1766699406\u0026gtm=45Pe5ca1v9225395540za200zd9225395540\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115583767~115616985~115938465~115938469~116184927~116184929~116251938~116251940~116744866\u0026z=1553205299 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T06:45:41.005484Z","times_seen":761893,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":117,"dns":3,"connect":14,"send":0,"wait":39,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/cropped-ugurfilmfavicon-192x192.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/cropped-ugurfilmfavicon-192x192.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F; _ga_C4H3WS4T4V=GS2.1.s1766699405$o1$g0$t1766699405$j60$l0$h0; _ga=GA1.1.1594089440.1766699406\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5600\r\nlast-modified: Tue, 25 Jul 2023 20:40:10 GMT\r\npriority: u=6,i=?0\r\netag: \"64c0332a-15e0\"\r\nexpires: Thu, 22 Jan 2026 20:12:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 178672\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DajDv6f5X5etBFsTMIj9ONqrb1F2WX4wPoyw7I3d0JH%2B0ur%2BDB93R%2F24Wskdpi96S65TXIlsu8EjUtdVV62WmMuEezlCLyYxXCy6eKM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d562bbd3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5600,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 192x192, components 3","md5":"d570518cbf206829c2ddf849ac0c318a","sha1":"874fbecc4b903121a142c88310d0b14b37ca24e0","sha256":"fbb97cb53a6f2f0bdd9412e4a5e14e5fb0e49566aa56329b635d183c2c05a0d1","sha512":"12927ca8c763234e3cbc1e50afcba761e737215ecafd0fc6201294161e19dddb7869677e4cb55b79f6f16952204046e12689f8365a49168a2b0c52c8d5985981","ssdeep":"96:/PELgVilyT2lVELBM/O3hFIjYoSsRGeB+SQtVXRwXDa+LHCVi0xL:/P+7vwLBbR2n0EOVi0p","tlshash":"37c15ba74905c3909d69aef96ba72fae9247bf042544c9435272c39fbd309c009ed54e","first_seen":"2025-12-25T21:50:35.636796Z","last_seen":"2026-01-03T08:11:54.20235Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/themes/Wpdeo_Star/__front/images/favicon.ico","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/themes/Wpdeo_Star/__front/images/favicon.ico HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F; _ga_C4H3WS4T4V=GS2.1.s1766699405$o1$g0$t1766699405$j60$l0$h0; _ga=GA1.1.1594089440.1766699406\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Thu, 10 Dec 2020 07:19:34 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"5fd1cc06-1bd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2kIShL0Z4Yv5PINDKAR62hN9KF8dARAuC6XjTEgj4XZWAsK8Nj1tuhrzU05UypZAMaCFaGBRKhqWOnypom5vDdvUx%2Bkrkd5FZY9wc%2Bk%3D\"}]}\r\ncf-ray: 9b3b8d562bbe3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":445,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"c8b4f0aa3c9d8af11c0092ddd22b5723","sha1":"29de5506d24a37c992f25b3106e346701137ef12","sha256":"1ab80387964157d18de95fafcd3bd030b6b95dc0c27b71a005a3d8c16766715a","sha512":"a916873a9850cb322f0d8179ee315ed85ae4fe972b20403675e7ffc1ae9a0686e5087289d26fa68fa16c4a647a6cabff8ae8e2ccb1d6a22bf7a68af97e255ea0","ssdeep":"","tlshash":"08f023f15b18ec31e267006e7e449210d59b8c3920d6137c4201d25a5c7614cc7ea6b3","first_seen":"2023-09-16T16:25:13Z","last_seen":"2026-01-03T12:59:33.402921Z","times_seen":15,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v11/4iCs6KVjbNBYlgoKcQ72j00.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/ubuntu/v11/4iCs6KVjbNBYlgoKcQ72j00.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ugurfilm3.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 46580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:47:55 GMT\r\nexpires: Sun, 20 Dec 2026 10:47:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 471730\r\nlast-modified: Wed, 11 Oct 2017 18:21:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46580, version 1.0","md5":"366417c7fceae9f0a9ab862afe3a859d","sha1":"b49a6ff2272ba97e6fee688311fa2b7a6c8315b8","sha256":"c48f333a02b5f55412ac48244b995492cd0676b654bd1bc25c03c312c68e93f0","sha512":"4969850d7788369271d49d1e904f7cf33a93a20cba00746b2ad5e129e02a4fe1695f23c386174e5a70e153a9ae72c1707ef1be6e112a9481de945b19c4a0231a","ssdeep":"768:qRDCPOt1N9kH0TCkK2eb9A6FwnGJA4bdUwns3gFFnC6E4Fh178G8hCR0e9bSFq5a:qR1t1LkeCWehA62nGJlbqwnsA1N8FCRc","tlshash":"6523f1d64d6750e2a9420df54fe60a312ee39065bf2c01ee2b2d3507649afdeac93813","first_seen":"2023-05-24T01:17:28Z","last_seen":"2026-03-22T12:30:57.585831Z","times_seen":66,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v11/4iCv6KVjbNBYlgoCxCvjvmyNL4U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/ubuntu/v11/4iCv6KVjbNBYlgoCxCvjvmyNL4U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ugurfilm3.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37520\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Dec 2025 15:48:11 GMT\r\nexpires: Thu, 24 Dec 2026 15:48:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 108114\r\nlast-modified: Wed, 11 Oct 2017 18:22:27 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37520,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37520, version 1.0","md5":"8a0727fdaad25826b7f34b1c67bb7ee0","sha1":"4a23047cbfe32e07c8ebf817d9667461b1e173ce","sha256":"0e7ae1ffc31e138ba5c1070a819da9c4af281c2b38e24b20ffdb56d3c8dc4de8","sha512":"03e54c7ed904fdb7d76f52cbcc25c620e340d5a0e2f68793c8825d575cffa541aa87812d9a3847a79b85bc19e825592716604e08dda57271bc5f8dbf97496356","ssdeep":"768:rNZTa8qX8/5P5dIvfi9b+R1ZBJJJzJlc2+NkPy40Cl:rO8qsxPGfi96rZBH3kN+y40Cl","tlshash":"c9f2f19744dedac9c63ebabb43142d53073425287dd1a4922b51773803d5abc8fd2c72","first_seen":"2023-07-13T09:34:30Z","last_seen":"2026-01-03T08:11:54.221051Z","times_seen":4,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-25T21:50:04.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:50:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: tg=blue.css; expires=Sun, 02-Sep-2057 23:36:44 GMT; Max-Age=1000000000; path=/\nkklsr=%2F; expires=Sun, 02-Sep-2057 23:36:44 GMT; Max-Age=1000000000; path=/\nPHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; path=/\r\nlink: \u003chttps://ugurfilm3.xyz/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2F59tszsMjUFOGq2tzUg3u8DSvL%2Fdkr3dNCdErgaA6gM8v83lbDBw7XEi0oo1FIjzVYhltHSgj4BQKX7h6Ycox41VeR8V7QivUeq0H0%3D\"}]}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3b8d4e49fa76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Gravatar","description":"Gravatar is a service for providing globally unique avatars.","website":"https://gravatar.com","common_platform_enumeration":"","icon":"Gravatar.png","categories":["Miscellaneous"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Site Kit:1.168.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":49434,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (35101)","md5":"86c1e65b068e779a8bce81538cf4ee51","sha1":"25c4e930994fac3b824bee9324f8a4a699e9b3da","sha256":"4c6aac6b5f14e1a30e0a363418f652b859402ab9b24e8dcb929ebbfcc2cdce73","sha512":"7d2798a73aeffb80d2fe72c7157b5e23eda52fbb22d194587b018e0d2de458c253d148f4e100084678175259911941e83b512a71ddb9551422cd81e4a991d65f","ssdeep":"768:vkYgZdypJnj8joFadk815LJ181QceFBaRr1+2QOq:vk3ypJj8YEG18FBaRr1+2QOq","tlshash":"c923c6b3a675513b171ea7d89696771df1c2520fca420f16b2fc25c42ec5ef2b0e2528","first_seen":"2025-12-25T21:50:35.650397Z","last_seen":"2025-12-25T21:50:35.650397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-NGPB52Q3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id=GT-NGPB52Q3 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\nexpires: Thu, 25 Dec 2025 21:50:05 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143665\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":435764,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"5154e905a63055d8a16ba250ccd2a42f","sha1":"ad8ff54ce67bc2690c73a4fd53f88848bd840fe4","sha256":"90a22b8421bc215af61ff949ccdf840809adccb60835d890e869fc9cef66f93a","sha512":"01219dfae515b0457f87fa5f8fb820b0c588ab113abc496b058b3d28dce7acdbaaee85d72b9772814cd65d9cccdb70161b54e69e8a24255af385d1b783d3dfa9","ssdeep":"6144:i0Ie7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1pY:8C8bu7/1mbrnsy39WbMpL","tlshash":"439419ce73d674269396e078503f118ba57b29e2b45cc896f189cce02e7469a4237f7c","first_seen":"2025-12-25T21:50:35.654464Z","last_seen":"2025-12-25T21:50:35.654464Z","times_seen":1,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":210,"dns":1,"connect":28,"send":0,"wait":62,"receive":82,"ssl":211},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/kung-fu-hustle.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/kung-fu-hustle.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17335\r\nlast-modified: Fri, 14 Aug 2020 04:04:30 GMT\r\npriority: u=4,i=?0\r\netag: \"5f360d4e-43b7\"\r\nexpires: Thu, 22 Jan 2026 20:12:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 178673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2B3MRo1aKct0A8KkoOal1FkMpJ9%2BJPLYit%2FvWui9bYS3m1Dank%2FcnH5Ca7o%2BVco7t1iEI%2B68ZfCi3r4pZRgp2flfEzsRJXBo%2Fco%2FMZ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d523ae93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17335,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x366, components 3","md5":"edeb92af0546ef8b3e44189e3c9b7909","sha1":"76dc337240b015d0779233422043f74e30d898e1","sha256":"e441e82375134f2c22d963fb26abd872a8e05e33e5cbf79aeebf6e7e1df4d373","sha512":"80c4c0d8a1628a132f978ede2b9a1ec046f3142ee9e490d48ed8375f9fdfe0cffaf6a2d6d35f9e9c3701b4d0c37dfec9ffb874bac6b6dde4eb20e4c07d8caee6","ssdeep":"384:mXL4TUtOo4LSTBAYUHXFn7Iw6+RzIfNKbUzt+VhnjM2x:A6UtOo4LSTBgn7M+9tbUAhM6","tlshash":"9272d02a0b21b3d38c34d2ba3c170c1e735749cb759656bc48608aebdd5ffa1a56e40a","first_seen":"2025-12-25T21:50:35.657505Z","last_seen":"2025-12-25T21:50:35.657505Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugurfilm3.xyz/wp-content/uploads/the-nativity-story.jpg","fqdn":"ugurfilm3.xyz","domain":"ugurfilm3.xyz","tld":"xyz"},"ip":{"addr":"172.67.155.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ugurfilm3.xyz/","date":"2025-12-25T21:50:05.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugurfilm3.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 14:59:31 GMT","end":"Fri, 27 Feb 2026 15:57:59 GMT"},"fingerprint":{"sha1":"45:BA:45:CA:14:7F:46:DD:57:9C:E5:ED:D1:37:12:80:C0:60:C2:DA","sha256":"62:EC:1C:CC:D6:AC:8D:47:3A:50:4B:5F:90:74:D0:26:1C:6E:84:EA:B8:D3:39:ED:F3:96:26:C5:A3:01:53:7B"}}},"request":{"raw":"GET /wp-content/uploads/the-nativity-story.jpg HTTP/1.1\r\nHost: ugurfilm3.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ugurfilm3.xyz/\r\nCookie: PHPSESSID=ct8dkit05d2fgbnmpj1t7uenq7; SITE_TOTAL_ID=8993fcbeaacf54001fae0f9a3fa55afd; tg=blue.css; kklsr=%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 21:50:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31979\r\nlast-modified: Tue, 23 Dec 2025 12:28:08 GMT\r\npriority: u=4,i=?0\r\netag: \"694a8ad8-7ceb\"\r\nexpires: Thu, 22 Jan 2026 20:12:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 178673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pCVWIxJ1memzxKc9D6ZZBGuR2xk8L7LKekhVPeG83G4e0i41PsdTxSL%2B7HVUHDNeSInVaJFIV6F9V7x4B%2F7hu%2BEZ4ARsMbqssxeMPEk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3b8d524b003181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31979,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 260x390, components 3","md5":"588d575056c73239be35a8bfe6103c17","sha1":"31c82ed26ba80acabb9c179837717cf6239c1ffc","sha256":"699446896f27d392e3995ed70a40828bd3a6d955645055fe7ebefd7acb56edcb","sha512":"412e31cbf3934f111ea37bd98e09548f6069958a9b60dba6a2220d3d317715d3d3a1a0bbc32a77c4c301eff6f85ec5a7608c528cafc1e6282ce6fdb35e1558ef","ssdeep":"768:z0CVjgp8E0TVT19E7UPmDCFGDsFpq76HfjaOhDg6XxVufghll:zF88E0LuemWFNHqEfBXx8qj","tlshash":"87e2e18b05c46e778c062b7aff1281fa03e2209d7d88b3dd522ecfb59b74704565842d","first_seen":"2025-12-25T21:50:35.661041Z","last_seen":"2025-12-25T21:50:35.661041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"ugurfilm3.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}