{"report_id":"cde7de5e-5e27-406c-9673-a6f2c0ec1e4a","version":6,"status":"done","tags":[],"date":"2026-04-22T21:57:10Z","url":{"schema":"http","addr":"bahistrendi.com/","fqdn":"bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"104.21.27.10","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.bahistrendi.com/","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"title":"Güvenilir Bahis Siteleri Listesi - 🤔Bahis Sitesi Neye Göre Seçilmeli","dom":{"size":84804,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13004)","md5":"a009bc09ac56d93170c6ffa4d84fb0a3","sha1":"b7493edf9f86d915e99c6e43bc966e7316c870de","sha256":"d14b5714fe548324ab359dff4023c0d6697236598693c3c96b0497b223faf584","sha512":"2761f80ba4818e6515922767dcda07269f52b806bd8b9f8546652c2e55143b417b96235ad9caa75fadeb6bd4563e1342212c19c62e29483f9ef9c13566218a1f","ssdeep":"1536:hNmvfaeh+yypZa8+LuulzYBleBppBvBBKpBDiBx9BEaBwRB8oFQrwOECBzu87yTY:hNmvfaeh6MeTFWsf4s472+kpi49a","tlshash":"c1831a7361e4102a131bc395d2f96b3cab2ee26bc902899d32fc51419f94fe705e361e","dom_hash":"domhash6f2eff9cbb9b7e0775021cf695eb6426","first_seen":"2026-04-22T21:57:14.315777Z","last_seen":"2026-04-22T21:57:14.315777Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bahistrendi.com/","fqdn":"bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"104.21.27.10","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T21:57:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":13}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bahistrendi.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-24T00:38:18.424503Z","last_seen":"2026-03-24T00:38:18.424503Z","alert_count":7,"request_count":1,"received_data":69507,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"centerofseo.com","ip":{"addr":"217.174.148.128","port":443,"asn":57344,"as":"Telehouse EAD","country":"Bulgaria","country_code":"BG"},"domain_registered":"2023-12-04","domain_rank":0,"first_seen":"2025-06-07T11:38:36.825968Z","last_seen":"2026-04-18T23:24:15.891394Z","alert_count":0,"request_count":3,"received_data":27610,"sent_data":1332,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":8636,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-19T22:16:46.237507Z","alert_count":0,"request_count":5,"received_data":132971,"sent_data":2728,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.bahistrendi.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-04-14","domain_rank":0,"first_seen":"2026-03-24T01:57:40.359968Z","last_seen":"2026-03-24T01:57:40.359968Z","alert_count":126,"request_count":21,"received_data":948380,"sent_data":10323,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:26.6","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2026-04-15T23:36:06.032337Z","alert_count":0,"request_count":7,"received_data":90235,"sent_data":3053,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-04-20T02:23:58.830865Z","alert_count":0,"request_count":6,"received_data":10772,"sent_data":2754,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.bahistrendi.com/","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d0ad60fb04e397c288385b5fc47a0f7","sha1":"6795c88dbe06202ae0c28a9494251d697cc28be9","sha256":"ddc36f04cf11fb3b7d13ddf9aae1bf9d6dfac3c48e026fae5a32f085536378ab","sha512":"cc0155feabd134d90a94bdf1c6171c1c516ebcecbda26f07c8ab23e5dcdf86e7e7a020361e2bbdacaf4f612b58c49afee3138de987989dc6b20a2877c4e197af","ssdeep":"384:bgHbhwuphBHspuV18YR3geZY+N1xZ7r2/xet4I2jeXnc+XtuMzQ1YrPz0RaRyhUe:Qy6TTebCL0gDGKdgMUr","tlshash":"46937aba43c2c922cb8893c1989b6f2ed12bb2ef9495d4d6f62544f4506d37320b7277","size":94971,"data":"","first_seen":"2026-04-22T21:57:14.351946Z","last_seen":"2026-04-22T21:57:14.351946Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/rtrar.appLocal-js-extra","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a946c2553c3e43a539f9ce7e2c7270de","sha1":"0302c06d9e847d8e482fb3bd8ce222c21f51b4e0","sha256":"90269cbe5378189f41aaaddfe8942dadc0ad39b640ed41bfe3c3080f743960c6","sha512":"99cd050cf4dc5f2dbd12b0fb94287a9f1c100a661b36b5b845d785c3d4e325aab67a479ec8202dd95008d62113c0d0e7189ee2786c65f27ddcac76d1ae64d5ab","ssdeep":"","tlshash":"4af01294c0d82dd011601c7de26b51e39acd1088c0705a16464cc1400e73022c185a06","size":575,"data":"","first_seen":"2026-03-24T00:38:24.150367Z","last_seen":"2026-04-22T21:57:14.384291Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/poka-scripts-all-js-extra","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"83be13c79fa282ca65da88f994847ce1","sha1":"40c8b30bc29abd7e91a7eb8a64832b41fab68ddb","sha256":"72ffc74239046050e9dfa67e6f9ffb32fac0c7e8a61f4a053ede1b45177b32f8","sha512":"bd7dba71b5a4973da5fe9c518a61b231aedbfc8efead41db2a534c7e4df70eac0df26b4a8906685ddbe8021d288eaa39a923a54c62e366298c9a6fb456912239","ssdeep":"","tlshash":"99214c48d48897bb1953d5b5cc38d31e50b82219c8acdd600dffd843cb268a1e4d164d","size":1212,"data":"","first_seen":"2026-04-22T21:57:14.385105Z","last_seen":"2026-04-22T21:57:14.385105Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-i18n-js-after","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"555fa74ac2a6ddc3003933bed4098fe2","sha1":"370b3efba9dc3771f2243deba4388a200f60b051","sha256":"1591c78535c44a139d8dbe8331b70885a32c35fb3511e96cd5ef3c30558f3df2","sha512":"08a8825f8bc245685e07c647a370889f84d7691e6c3bb8dd6dc994fd0fc0190c880582ea58ec5b4707f4b31ab082bcfcc398f82cf5152a0e4875069136acd6bd","ssdeep":"","tlshash":"30f02b86f0973c80418b97705a63bd024581208bc17e880424d9ca206b724c0f4c231f","size":631,"data":"","first_seen":"2025-12-17T07:10:30.573566Z","last_seen":"2026-05-26T21:27:50.987169Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fff9404afbde35d6d7a8773d2b4fe363","sha1":"e84e71c4a4613203baa2c7238749d72e75af15f1","sha256":"a57b168a215ed1376077c115147841d08529f723da5d065b8faace7c8976af82","sha512":"7bebb1186d5b77bb446a14e18d03a85fd0eb352f1cbd2f2ff0b71bbe660cfefa427d9340f44ab69e94ce3d6ff0f96821b332214540a10ec1e6911b37657aadb0","ssdeep":"","tlshash":"bc71b79ae7763ccbb2f900f2697a0d47eb614435d6c8d438c9bda3141cb5893c274b46","size":3525,"data":"","first_seen":"2026-03-24T00:38:24.149515Z","last_seen":"2026-04-22T21:57:14.387549Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.3","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a53e18a345b37d4f72262a071684e79","sha1":"7269f0f9a41ca95df23387e1c4dad415f0228979","sha256":"3ab937ae57ef4a48601774b6a0cc701482a5c8bc126fcb677db4842b3a3c0003","sha512":"7f1b7ba5ebafb6e1cb9791ce8a0ad6eec1a743e6b15ad3e2d05f38ecf9a7f3437e41f398d3a91fcfbd294073cae25c4e4f6b5fc96526828071a0fc5ee0327b78","ssdeep":"192:7r2AeY1jWBoYfgZn+gSEmaAGCkHjpXCNd882E9cNS/JWmx:7r2AeSWBoYfon+gSDkrH1XCNd882E9ce","tlshash":"8102845f365a6a4156efa078616f324b623a20aa5801815cf47c9fcfad3ce1432b7d7c","size":8536,"data":"","first_seen":"2024-07-17T06:42:32Z","last_seen":"2026-08-09T20:17:08.429593Z","times_seen":17945,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-content/themes/pokatheme/js/scripts.all.min.js?ver=3.4.9","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a73bdd38e3acc47750711904e56e022b","sha1":"f203fa4474b10f7a81fcd7363a5d7bbc36085914","sha256":"aaf261eb8796f9ef9f23d0fc489f586b9987cf2b72ee98034b62253f33c30e73","sha512":"0ffc08e6056a87e68337834f23aabd6ad65421b4a03ccc576ed27bc5b08e944330baf4a5325b1cba04da6426b4707226df993431dee31d12e514e46e35256cd0","ssdeep":"1536:+Q5SeEKA6FFK9uC73HcFuMFn8dS6ARSncgLOa5feyrfR4PkYitY7X+VNmvfaH2Wx:75m6KcGSTwcza5vDgnXENmvfaqSPEe","tlshash":"84f33b49f264357542ab62b151af270e723b2429a40a847cb568d8ce2d3cd8d31bff7d","size":164091,"data":"","first_seen":"2023-03-08T08:38:19Z","last_seen":"2026-05-05T00:01:01.567102Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/sandbox%20eval%20code","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-09T20:49:16.811374Z","times_seen":1012227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-08-09T20:45:11.468505Z","times_seen":200868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-a11y-js-translations","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d0bb2beb77cc1d1951a9e0f7bf4c06a","sha1":"6ba32b16ccbf602d499acdf32f8bed2567bc9704","sha256":"208438db9e4a7601e8cf728ba03110ecc2c67fdb23c637238ef7e82161692eb2","sha512":"5828c58738a133bfa0998b465b0c9700133cd56c5b9441e5802163fcea4a98d793dd51d25ebc6155f030ae346d580ad032345f321809a8528df45af714e0b729","ssdeep":"","tlshash":"5911dd88fcb49e2981d263fb7a577945a0adf425c2bf2c07620f49051a60b5de6f370e","size":1109,"data":"","first_seen":"2026-03-24T00:38:24.151333Z","last_seen":"2026-04-22T21:57:14.389837Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.app.min.js?ver=1.7.8","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4031117922153771ac02e7215eba5074","sha1":"65d06636dfc4c918ae149ff2ece13099f9921857","sha256":"2e6b64b2e155135d29959ec0d024b9a629863c378863a6ece4b54c7d9effc1e4","sha512":"6f52e59abc459efa5ffc448411fbe07d59e2db37c13724a116a711a736f7b9a7814446744f7207104dabc9c5471c1c683a9fe1d5e8432b24d88b78d835ae282e","ssdeep":"1536:X+zo1GZGM+xTWaxsZs0JTKzvzokaggU6ExcJBXvtS9Zt8yFpVHyzxgKZZuMg:XutK3omIHtS97zEgKjuMg","tlshash":"1b83f9ddb2cab02247a771b9007f550bf2361999280dc410f159e8e9bc78a4e927bf7d","size":87478,"data":"","first_seen":"2025-01-28T17:58:38.93127Z","last_seen":"2026-08-09T08:04:20.371254Z","times_seen":2446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-09T20:47:34.001994Z","times_seen":340295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.3","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"284953f0e0a570aa06d6b527c45a55bb","sha1":"c4b8089261f001829f0d6e522928f6d912db7d1f","sha256":"41788f27f61aab4174275eb5fbbbcaffde0f4f0f07e6900592affad38e09b154","sha512":"81d15d80bbf4f8703e644157d74f8f44eea10e13553947437f14e9e448084d3b9a704cf87dbe0cc99d228a39820ce122a226973fa543da3c84ff70a8f504c51a","ssdeep":"192:sr91gNsoBeuLLE2mBrnYgfGGFTsPdQlJh1NmgKzH:srkjMunE7x/3sPd469","tlshash":"5422758831863a72349ba3d8291f60da6236649c9909555c70385fddee3df9023f37be","size":10199,"data":"","first_seen":"2024-07-17T06:42:32Z","last_seen":"2026-08-09T20:17:08.544889Z","times_seen":19559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf33509dde385d223dc5ea095535fce3","sha1":"9b99315710884eabd376e176be3c80343f74b19b","sha256":"46f7580ba60145316357ef5b4c9986931df94b71a36a37ca4cea0d53c5928cc6","sha512":"defa3831f308b9247e9d750e53096ad4485254e633605cd001c38b415e624fd644b2cf5b48ea7e0af1ddf4693413961436ab7a10fe76dc990681095edfc79340","ssdeep":"","tlshash":"3bf0f882386eb0e52193f9bb33fb02182113270f9080eb703aeec9080f50ad549ca2cc","size":439,"data":"","first_seen":"2023-03-10T10:25:23Z","last_seen":"2026-05-15T16:46:51.259735Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-08-09T20:45:11.402048Z","times_seen":203931,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/dist/a11y.min.js?ver=cb460b4676c94bd228ed","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc6bf7359b5df821cb6e4f8038a53296","sha1":"7168a225d0e23b428d528a4e1fa0e59fbfa6dbda","sha256":"c99c0a54cd4e1b44926d0bbeb3fc307a12349389648bce3c47370a26897c41c2","sha512":"fd181c0b210d7b406e9796417dc33ca4ac7b87578673ba97b99ac2eb1705aaab28bcfb9b7aee83a7c194bfc469fe3ae3ed278bbd2a491483902b58a09d0543a3","ssdeep":"","tlshash":"064151723490757685bf35f79c6e93c6bf34ca213993d0949a0c9eb53239c9a2139b90","size":2212,"data":"","first_seen":"2025-10-27T08:47:54.302436Z","last_seen":"2026-08-09T08:36:37.269863Z","times_seen":35649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.7.8","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8102dc9eee0565de28649497220d8d17","sha1":"a32963be36656f3dd149892540138913bc88de6c","sha256":"51ff2b4b46acab057eba32dc5fbd0bcf410f0ad2bb75d7a92b230bc627d930d6","sha512":"3dcd2d1084b5903e84ebf14fa18fea644d77a7b5b140563fa7eff43f3029b1c32bae0431746e86a26ecc4de8f2341f0cb1f74fc92cc9c92a408ea87556c5412e","ssdeep":"","tlshash":"657000232200083000328282080a000aaa0c8282800822000820308020a0200000882a","size":19,"data":"","first_seen":"2023-03-07T12:08:00Z","last_seen":"2026-08-09T08:04:20.351684Z","times_seen":3144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4bc17cc45ca91ab0f09dea134975c51","sha1":"3c03312717fb495c051d02a3d27ec0d8abc2557d","sha256":"5a43a22e48f94b7a45a9a9b1a107f197213b73307fdfa2e6b2daadab264f94d2","sha512":"f8e537a2168b94875bb7ddb9a20037c5bc79831c8b4e726f224f8d7c723c5c4b4512551697cf7bfb6ce4b5f8365dc1c027107ffe3435ea27c686f5ae96d921e7","ssdeep":"","tlshash":"bbf0d4705445edf071bc80e6442d53c1b5219039372270f14b8cdcb569e0f96127ede7","size":457,"data":"","first_seen":"2024-04-03T10:12:48Z","last_seen":"2026-08-09T16:05:16.569276Z","times_seen":108071,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-09T20:45:11.464033Z","times_seen":310752,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:49.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bahistrendi.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 01:51:05 GMT\r\nexpires: Sun, 18 Apr 2027 01:51:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 417944\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-08-09T20:07:46.20981Z","times_seen":32721,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":42,"receive":13,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-content/themes/pokatheme/css/styles.min.css?ver=1739789251","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-content/themes/pokatheme/css/styles.min.css?ver=1739789251 HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 12475\r\nlast-modified: Mon, 17 Feb 2025 10:47:31 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NNz4MbecHpAiFVvwFtDEkEh9XS65Hq9ljylXVVuBwWwCwGFAPaTgjol1SFfdtzFtUCo7mq8TZnOPAT9MiH2l8cF6kW6SI7i2S%2B5NEs3UwezcK1laVeGfrI6TxrpKJYltnDgV3uh5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e16c5f0f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82488,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0742984d9e050f4c5928b5cba09b2282","sha1":"b5b7f247034ae8ad3bc80254290092b72cdc23e9","sha256":"a8a1ec6ac391858c5183101f7620ce5d8462f73e56cc3e782dc37c7c8dd15195","sha512":"b17813eb17eb17a3f6fd3c461fa800fbf63573fbf060a36cd96be6606d52c92fd95456db3d544a23995447b2bc85ff5c8b4e440f9c14b1a4163ecbbed55d78bd","ssdeep":"1536:nYw9zM+dcqfQM3xnnZJiTmNAPlPgrqCxVu5kvXaAoXaFqOXrgP/79V1gaGUdN:nFnZ0","tlshash":"9383d823761d32acb01bc1b8b6c354ca35ac5811d72796feeee6b515c78e1960372b8c","first_seen":"2026-03-24T00:38:24.134986Z","last_seen":"2026-04-22T21:57:14.320191Z","times_seen":3,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/vy7GzFj.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /vy7GzFj.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 20 Jan 2026 13:09:15 GMT\r\netag: \"2e1fb6f788276b46e7aa3b83b356a3f7\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: kqKwplBLGGV6rtTWkZxZCays0g9YKDNaYqubIlcDwgEsxtoEK7ZEHQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 311513\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\nx-served-by: cache-iad-kcgs7200125-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 115, 0\r\nx-timer: S1776895009.771319,VS0,VE3\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 7547\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7547,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 293x90, components 3","md5":"2e1fb6f788276b46e7aa3b83b356a3f7","sha1":"77d91b44b32341404df71daf0a24781c2cca44fb","sha256":"70eb048fed87c7bbfc52e6cb05badde183eca435d6a9d119f5622f2f59c6509b","sha512":"e334c2e017a02909d05fa61698d7b894348d3488db9d1b589b1f963687590b915764e62446c09d8be6beb45bc02d18bebbc968890bb1582c1f2a44ade8ef7713","ssdeep":"192:yiIMm53v0FyMlEzMtiCapf+T0oatBUCAw9XfBg7FKQv3Oa:yiIB584MlEzNCap2YoUGCAw9XJgtvea","tlshash":"43f18e65ce5214a8560d2bfd4f8904f54caa03c7fa151ec1af700f86b68f51a095efea","first_seen":"2026-02-08T05:23:30.234848Z","last_seen":"2026-08-01T16:22:46.802494Z","times_seen":7,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":10,"dns":13,"connect":13,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.3","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/menu.min.js?ver=1.13.3 HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2920\r\nlast-modified: Tue, 16 Jul 2024 21:28:02 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AOAaVP1lj5DmHZBQ%2FMYcKOfh5pXUB8ya7SlCwrgp57qRcvrCfbZE5rlyxjr9q4tFW7IfzBAJsKgK5G1KycmdXY1uUFA1DOneXpWzVv04ydQQIaSlEw8z5OK1n1umSvXxaChoEDJ5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e16cbff25ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10199,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10020)","md5":"284953f0e0a570aa06d6b527c45a55bb","sha1":"c4b8089261f001829f0d6e522928f6d912db7d1f","sha256":"41788f27f61aab4174275eb5fbbbcaffde0f4f0f07e6900592affad38e09b154","sha512":"81d15d80bbf4f8703e644157d74f8f44eea10e13553947437f14e9e448084d3b9a704cf87dbe0cc99d228a39820ce122a226973fa543da3c84ff70a8f504c51a","ssdeep":"192:sr91gNsoBeuLLE2mBrnYgfGGFTsPdQlJh1NmgKzH:srkjMunE7x/3sPd469","tlshash":"5422758831863a72349ba3d8291f60da6236649c9909555c70385fddee3df9023f37be","first_seen":"2024-07-17T06:42:32Z","last_seen":"2026-08-09T20:17:08.544889Z","times_seen":19559,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bahistrendi.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 01:51:05 GMT\r\nexpires: Sun, 18 Apr 2027 01:51:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 417944\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-08-09T20:07:46.20981Z","times_seen":32721,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":110,"dns":1,"connect":20,"send":0,"wait":23,"receive":21,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f381.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:49.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f381.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 21:56:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:29:29 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 26\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":656,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7a7ff35f227d659eb5efd817e2052174","sha1":"667a23edc0b4c2930babfb9f449c0ca0f726140d","sha256":"05a6562177e8e5f89852e08f7bbd6b62597b35d70c92238fcab4d6674ec76048","sha512":"14b068f5557cd0833cb64807f8da41afa99fb613f94af63bd940c71ef3899e2968b88b481138c60c773e572116a1b8f4ec8826d334fa31d36d4bac4bdd4441fa","ssdeep":"","tlshash":"a1f099d8d0b03412484b47d92e9fb1c31781503980f90684b20d6630ee8f7de7885e48","first_seen":"2023-05-15T11:54:26Z","last_seen":"2026-08-09T17:20:28.817591Z","times_seen":5962,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":118,"dns":1,"connect":9,"send":0,"wait":8,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-content/uploads/2022/04/bahistrendi-favicon-55x55.png","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:49.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-content/uploads/2022/04/bahistrendi-favicon-55x55.png HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 689\r\nlast-modified: Tue, 28 Feb 2023 08:26:57 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qhV0%2BgmMfw69gCaP27lFG5IhOSiOozCYusdJk0EwzF7pKHTmAqdmZjvCBvD2Q0MWR1SERQBVTise%2BS7Z%2BP1WIpoRKxOUbNEmuDUGY4hrbLuG1%2Bt%2FhjfTz8eQNcIsyXm85bp%2Bxf3S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e1735d035ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":689,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 55 x 55, 8-bit/color RGBA, non-interlaced","md5":"a44249bd9e31ab8fbe8c463532f6afcb","sha1":"6d21dac2843a5418adfe18892cd547834cee0dc3","sha256":"a6055091ddf44747b142a59b1943b8b280eb52efea996aab8cc9660dbdfb6c22","sha512":"d2d799043b687f134061e2cfe16f36548032787d95113b73ab6a96a56a064f3f0f6b7c500a88087b0515272223f227d8c0b37f78435dc286723d01dfc1d2d2f7","ssdeep":"","tlshash":"410144d224f148d0d87fe1b30aa70f468695809b56dda3a985a11a37de32ab4aa60335","first_seen":"2026-03-24T00:38:24.10999Z","last_seen":"2026-04-22T21:57:14.328155Z","times_seen":3,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-content/themes/pokatheme/js/scripts.all.min.js?ver=3.4.9","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-content/themes/pokatheme/js/scripts.all.min.js?ver=3.4.9 HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 43522\r\nlast-modified: Tue, 28 Feb 2023 08:27:00 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5W5FKALp4xymB%2BLpUJY8zKECrqv%2BaeTC6kxx%2BwCrXEzFYbkCRdBeWir9eWxsNTxD1DWLb9WRcTLIRqm13CHWvLxTVLCMKFPWlfJ5sjq9EB3ztITnJey5wngPnqKfZV76uFefrBN6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e16cafde5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164091,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65368), with no line terminators","md5":"a73bdd38e3acc47750711904e56e022b","sha1":"f203fa4474b10f7a81fcd7363a5d7bbc36085914","sha256":"aaf261eb8796f9ef9f23d0fc489f586b9987cf2b72ee98034b62253f33c30e73","sha512":"0ffc08e6056a87e68337834f23aabd6ad65421b4a03ccc576ed27bc5b08e944330baf4a5325b1cba04da6426b4707226df993431dee31d12e514e46e35256cd0","ssdeep":"1536:+Q5SeEKA6FFK9uC73HcFuMFn8dS6ARSncgLOa5feyrfR4PkYitY7X+VNmvfaH2Wx:75m6KcGSTwcza5vDgnXENmvfaqSPEe","tlshash":"84f33b49f264357542ab62b151af270e723b2429a40a847cb568d8ce2d3cd8d31bff7d","first_seen":"2023-03-08T08:38:19Z","last_seen":"2026-05-05T00:01:01.567102Z","times_seen":8,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahistrendi.com/","fqdn":"bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T21:56:46.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 22 Apr 2026 21:56:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://www.bahistrendi.com/\r\nx-redirect-by: WordPress\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vqfF%2FXNgaBkrDhwd%2BTXRWxk2IrKkHJOrGTFcu1xJVz6oVuLDZTG%2F8XhoLL3dpNDk0CEybKCOu%2B6ZVdlDPjlx%2BMNn1zDiB%2BSgMw%2Bmdix89yqafEPbytIAj5mEK0GHscdlfMk%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e1613bac56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68852,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:49:10.945342Z","times_seen":17805789,"resource_available":true,"data":null}},"time_used":703,"timings":{"blocked":39,"dns":18,"connect":1,"send":0,"wait":626,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T21:56:47.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://www.bahistrendi.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://www.bahistrendi.com/wp-json/wp/v2/pages/1212\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://www.bahistrendi.com/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IPLWyySQ7qLIpoK80Tbx0zGnCalnCcepEiiatg%2BP9zor8jch%2FbDDgRD8RxU3fRAjUy7edO35iZIAw0KLXBI1sAS3a7AQ26YPZcwpZOJsLNZWddixwHdVD3XP3iVnBqW1Mskk9CeH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f07e16578a75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:26.6","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":68852,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832), with CRLF, LF line terminators","md5":"9ad9d3b29be9374763dfb2098f30fb74","sha1":"8019b599b1d5ac887d319a17d6d20fc78fc3a47d","sha256":"683e081644ecd111f703ebc16552b0e9723bd73308cdb1b1f8f1dfd18f2709f1","sha512":"98f65c7210d9675844004daf13be63942740dce943911380387248aad3f1f4029b4f60367c447304cc2c6a5a66f02ce35d5bd7249bacc5c5df76c47559ca368d","ssdeep":"1536:DJy+ypHuujzYUleUppUvBUKpUDiUx9UEaUwRU8o9+reOECBsu3dTFWV47eU4s47f:DJCYTFWsf4s472+kpi49E","tlshash":"3b63fa7262f0407b275bc3e9d172ab1deb66e11bca068a9475fc92505fc9ee304b360c","first_seen":"2026-04-22T21:57:14.338189Z","last_seen":"2026-04-22T21:57:14.338189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":912,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":859,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"centerofseo.com/img/mobilbahis.png","fqdn":"centerofseo.com","domain":"centerofseo.com","tld":"com"},"ip":{"addr":"217.174.148.128","port":443,"asn":57344,"as":"Telehouse EAD","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"centerofseo.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 22:54:41 GMT","end":"Mon, 20 Jul 2026 22:54:40 GMT"},"fingerprint":{"sha1":"8F:C6:A1:6C:19:56:09:17:80:48:72:38:CD:9E:54:CD:72:BF:F4:71","sha256":"B2:8A:5A:E3:78:B2:4F:CE:8D:C3:34:0D:92:00:4C:AD:3D:6C:59:83:F5:9E:23:34:89:EE:29:B4:DB:6A:CC:BF"}}},"request":{"raw":"GET /img/mobilbahis.png HTTP/1.1\r\nHost: centerofseo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nlast-modified: Fri, 07 Feb 2025 01:26:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8244\r\ncontent-type: image/png\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8244,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 293 x 90, 8-bit/color RGBA, non-interlaced","md5":"23bff5b9fb2ee3ff1fb916cc0425a775","sha1":"cec63e48d0eae4318472ab6b4d7d94ff46e65e1b","sha256":"5070a3d4aeb8c594ebb9a76f6e40bac8ee7644483ac6681a31018ab61162a237","sha512":"a96daf635ca7e4bde337130e94ac725476c84cae3756dcc54227e66c0776e4dcacaf4b821422751063069365f3bd2d8bef23c2f23ce592f1381dd1f6c32f1d8f","ssdeep":"192:tSrwzzvCqdgYnmPXH08YX8l8bdqGtLP5Cq:sr+zvC/vH08k8lruLP/","tlshash":"ee027ce1e0e2702edc21ba6bb4da4b5d00b1e6884e83552cf6dfe1951c823865e1b2c3","first_seen":"2025-09-22T18:41:15.635355Z","last_seen":"2026-08-01T16:22:46.798569Z","times_seen":11,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":210,"dns":152,"connect":50,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.7.8","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.7.8 HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 23\r\nlast-modified: Wed, 24 Dec 2025 06:39:34 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x35z4V2NdFI2%2F%2FvpQXu2Ed1cUVjgg9qZyQihIQkuGg19qJJ6d1sJBYeSB4JC4PZM2LUnl1SaBerMW9DzgCCxnT5ykv2w4V8Sq5GusNpRMg%2B8eY8r9AdIU3T5Jc32vSDp67Yvnj0H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e16cafd85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"8102dc9eee0565de28649497220d8d17","sha1":"a32963be36656f3dd149892540138913bc88de6c","sha256":"51ff2b4b46acab057eba32dc5fbd0bcf410f0ad2bb75d7a92b230bc627d930d6","sha512":"3dcd2d1084b5903e84ebf14fa18fea644d77a7b5b140563fa7eff43f3029b1c32bae0431746e86a26ecc4de8f2341f0cb1f74fc92cc9c92a408ea87556c5412e","ssdeep":"","tlshash":"657000232200083000328282080a000aaa0c8282800822000820308020a0200000882a","first_seen":"2023-03-07T12:08:00Z","last_seen":"2026-08-09T08:04:20.351684Z","times_seen":3144,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-content/uploads/2022/04/background-1536x1024.jpg","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-content/uploads/2022/04/background-1536x1024.jpg HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 173309\r\nlast-modified: Tue, 28 Feb 2023 08:26:57 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D7bYgDD5GfWSVkcdz%2F4TdqrtEwpedimGOvigVuLo5j8LImYWv2%2Btdai6GqiQPA%2F0Nzoh%2Ff8Watv3DfICp7AijeIpREQ3sIR%2BbCOOCGwngp86DC%2BMrMTQU%2BGFFq8SzOw8cB1PIydO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e16c5f105ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173309,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=1333, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=2000], baseline, precision 8, 1536x1024, components 3","md5":"cf943e472fdb957c136a2520b22a1002","sha1":"5f58adf9ee4c380b1051fc0a9061ded8dc8cee22","sha256":"d5af162a1f4689a025fdfe1d4d1f796ef27377c7bbce3842af9a619e6beddf20","sha512":"ed61b5ef9b3f215adc8a30f19355bc04fca139c6a578ca434192230b79d4992aac3d27afc2c5bbb498365eb28679847acacb856be6957ce052652ead04c2f8bb","ssdeep":"3072:cJ1dh55YUSKhjk78xNonAnQ8ZbF1deOMX3IrObOKVpsdm:cJl5+USgNony75deOs4r+jLum","tlshash":"79041292f9031913edc4897e84c6559e8b3ad40b838790e2b5bdd3bf339b4d44d989a3","first_seen":"2026-03-24T00:38:24.12056Z","last_seen":"2026-04-22T21:57:14.341479Z","times_seen":3,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/0daGVhX.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /0daGVhX.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Wed, 12 Nov 2025 15:05:44 GMT\r\netag: \"a79eac60743a1860ee8438d19bfb04b3\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: 6RXvJSBBUrW636aiZ4EddVEWkcbttRW0_Bqq50_mSl4UW-RhLYD7JQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1074305\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\nx-served-by: cache-iad-kjyo7100126-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 438, 0\r\nx-timer: S1776895009.771645,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 17693\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":17693,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 293 x 90, 8-bit/color RGBA, non-interlaced","md5":"a79eac60743a1860ee8438d19bfb04b3","sha1":"77021a13a54bc71ff42b2ada800a66169ace9859","sha256":"aca3cc78f326097c8b9d2e8cc91414ea6f900941d2d095e854f19da201e7ea01","sha512":"2ac2f0dce928f60858afdc2ca592e0325edf4dcce08a9ed3b8a68e09da7358616c42bf633c8035b4ab7a206b41f078b2cd0234e89a4601c1da6883c59ed02ad0","ssdeep":"192:RINy6eYgHgOXQeiRRp+lHd0q4OWE1lkXmCdscdnUjyQChABA0WWqJ3eSLKxDK0b8:RYcQSwxEaBF0WAhmBDmbOQe7aKL","tlshash":"e282d0ef501953074b0ff0b7d6a13915a5a16e2d6a009e2bf1e2f3989f654dc631c4e4","first_seen":"2025-11-19T10:05:21.621898Z","last_seen":"2026-08-01T16:22:46.786991Z","times_seen":10,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nPrXyw1W3fxIlGzg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:49.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nPrXyw1W3fxIlGzg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bahistrendi.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19480\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 14:25:58 GMT\r\nexpires: Sun, 18 Apr 2027 14:25:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 372651\r\nlast-modified: Tue, 09 Sep 2025 18:38:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19480,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19480, version 1.0","md5":"bc0d51a55b8ad173adca939390c96045","sha1":"ab757e9eec9f39949afd92e0d2d2ef02f4a859e1","sha256":"d1ee519d0cac55030ec7cc0927a7e57e324d40a5eee5024dde5ed107d888aa46","sha512":"206f7610005d160e3af9fe67ece56868a8f5f2e0afd53ce7a34d022a7832f0100f72779139ea37265c23cbd690e680694cd6c264c198266a1bc561801f0eaf5b","ssdeep":"384:2/bUzzda1Rx/5cod5RQDLZjNObIbbkzJulFGzk5mm+KCnirm6:YUzpMRx/5HRCF34zIFkk0mOl6","tlshash":"9992f1123267a804c15c3a39f67e8e03e2f84a2a35b595a0f95f16d8831c2787126cbf","first_seen":"2025-09-10T18:44:19.134845Z","last_seen":"2026-08-07T23:21:56.44452Z","times_seen":2085,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":37,"dns":1,"connect":7,"send":0,"wait":53,"receive":9,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Rubik%3A400%2C400i%2C700\u0026display=swap\u0026ver=6.9.4","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css?family=Rubik%3A400%2C400i%2C700\u0026display=swap\u0026ver=6.9.4 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Apr 2026 21:56:48 GMT\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7950,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"4d15473ca06e5f91f9107f9d1f05d258","sha1":"94ad62d978cbc8e4f46f060a995c31c9f2b0716b","sha256":"b97456beb3667f43797f7251bda0b7bd5d9a27d8468895d37770836f9e67cac8","sha512":"141359d977e951bed12f446ec0deb6dc7a1480c3dd23a190ba9e12d9a3e51ae2c9f7dd605c92912fbb772ed43c19833adb6330bd1b3e62a35a9915f2d0273a8c","ssdeep":"192:jONClkOjsO6OsOVGOrhCl8s0KtAuWhClls9nkALp:jRlkistbD1lHTleD","tlshash":"46f1ade1481e4040bf472cc163ce6d37ee0e62553490d56d9afe1e9aacabc6273647cd","first_seen":"2025-09-15T19:49:53.782011Z","last_seen":"2026-07-15T22:05:14.949328Z","times_seen":16,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":143,"dns":1,"connect":7,"send":0,"wait":17,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-content/uploads/2022/04/bahistrendilogo.png","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-content/uploads/2022/04/bahistrendilogo.png HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 22189\r\nlast-modified: Tue, 28 Feb 2023 08:26:56 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VRjhbU0VtqsZPpLUNEUIvPLkXZe3SJFifr6wQNp3K4tnM%2Fh1c6UOZHxcq9S4P8W%2FebGk9XpMavUY3%2FZGa%2BWYuKLSLFtsm%2FeSeGx1iZvmac2vQOiidXTiLUIB4Q%2BODmMl1Ax8y8st\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e16c5f175ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22189,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit/color RGBA, non-interlaced","md5":"d52b0fb74c7aa131e6d6f19e4a1019d5","sha1":"e188d88d16a6a7b3bd105bba0543656484f1267d","sha256":"6980db426cab058d8da252e52952db63c9778c60cec5546a85799ad5318e92e6","sha512":"b9e79318be2b0a4e34d88ab662c9ed576c4a99c9ea4e4ebb7c91f057690215d92b910c9cfa75cb8e5030593c13143c5adfff9220dbf100eef422dd75175203c3","ssdeep":"384:8XE053ML6Uinpj+P84bHhCt906SHB0nWDiJ7BSGPmirJiej/wyYg2MvbpV3Ny:2353g/k+TK9JSh0nzS+JwTMdVI","tlshash":"b9a2d0d2d805d01ccf6e2300a13ebde185a8b33ce5645a752bdc1bfd54a978a03e29a5","first_seen":"2026-03-24T00:38:24.145401Z","last_seen":"2026-04-22T21:57:14.350238Z","times_seen":3,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"centerofseo.com/img/youwin.png","fqdn":"centerofseo.com","domain":"centerofseo.com","tld":"com"},"ip":{"addr":"217.174.148.128","port":443,"asn":57344,"as":"Telehouse EAD","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"centerofseo.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 22:54:41 GMT","end":"Mon, 20 Jul 2026 22:54:40 GMT"},"fingerprint":{"sha1":"8F:C6:A1:6C:19:56:09:17:80:48:72:38:CD:9E:54:CD:72:BF:F4:71","sha256":"B2:8A:5A:E3:78:B2:4F:CE:8D:C3:34:0D:92:00:4C:AD:3D:6C:59:83:F5:9E:23:34:89:EE:29:B4:DB:6A:CC:BF"}}},"request":{"raw":"GET /img/youwin.png HTTP/1.1\r\nHost: centerofseo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nlast-modified: Fri, 07 Feb 2025 01:26:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13397\r\ncontent-type: image/png\r\ndate: Wed, 22 Apr 2026 21:56:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13397,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 293 x 90, 8-bit/color RGBA, non-interlaced","md5":"cab5c4c8607b1fc2f0a92c67082c1015","sha1":"dacf3e7c3ea86686485eb16a9ce0c6d3dd41404e","sha256":"ce10e76b61bfcf134dda76aaed51e7dd7a9c0c4f6be558a87c31facc269ac9f1","sha512":"3f3cc90009b1aa1eb0ae0bba9486bcdfe4feae8441cb36e546f4648fd5c06a160e5fee5070fcbdd74badebeff6c9a978f00c7d730ffc334fe40b091bb5f0d98c","ssdeep":"384:sNR15H1wIammLEX0pAjeF0Z2pPsECkyGBX2oV:qWPmsE3KF+2pPsEH/2U","tlshash":"c652bfd851e438548d9c5dae39e1ff408ab3e47f11aac8dc921a5c9e735960cbb19603","first_seen":"2025-09-22T18:41:15.64273Z","last_seen":"2026-08-01T16:22:46.803599Z","times_seen":11,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":146,"dns":0,"connect":54,"send":0,"wait":53,"receive":1,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-admin/admin-ajax.php?callback=jQuery37101888380520215759_1776895009049","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:49.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php?callback=jQuery37101888380520215759_1776895009049 HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 47\r\nOrigin: https://www.bahistrendi.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":47,"data":"action=poka_autocompletesearch\u0026nonce=7486114cb0"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: https://www.bahistrendi.com\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LGBN83%2BxQfgV1%2FfSSqJdk8Xb2zEq7zHi%2BIRV66iSJ0VMmz1ZBORvWWZv9N6m0SpKmx1EnSRbp7dtSpkEwXjTdo6AnH5GCQ3vcwz5GqHz4JCKIy7usxl%2F5%2FhIbtPDlc5Hk37swStG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f07e16fad6e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94971,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3d0ad60fb04e397c288385b5fc47a0f7","sha1":"6795c88dbe06202ae0c28a9494251d697cc28be9","sha256":"ddc36f04cf11fb3b7d13ddf9aae1bf9d6dfac3c48e026fae5a32f085536378ab","sha512":"cc0155feabd134d90a94bdf1c6171c1c516ebcecbda26f07c8ab23e5dcdf86e7e7a020361e2bbdacaf4f612b58c49afee3138de987989dc6b20a2877c4e197af","ssdeep":"384:bgHbhwuphBHspuV18YR3geZY+N1xZ7r2/xet4I2jeXnc+XtuMzQ1YrPz0RaRyhUe:Qy6TTebCL0gDGKdgMUr","tlshash":"46937aba43c2c922cb8893c1989b6f2ed12bb2ef9495d4d6f62544f4506d37320b7277","first_seen":"2026-04-22T21:57:14.351946Z","last_seen":"2026-04-22T21:57:14.351946Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1097,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f4b3.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:49.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f4b3.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 21:56:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:26:00 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 26\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1017,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ae85f3ba482693c99192d68b402b691c","sha1":"00afcdef98f55954ad726f0753bf2ce0f701cab6","sha256":"369a2f73463f01b0cd5c8329a356b9108d8adf8f85b43d3446a69184853d6dc5","sha512":"55e965b31c8390d99f2504a96ca98d1f8206c67e75fc1092a3e50eca43f6ae3c57fe3dddc4c3123eeb578b9115f1331758783f268e2c112faed7fc17f655c47e","ssdeep":"","tlshash":"f21132ca2370f7c4cc8bc68d2f6ee9d94201a0ae20b940d6690e671c229becd3d08d44","first_seen":"2023-06-17T17:15:03Z","last_seen":"2026-08-09T05:06:53.233904Z","times_seen":1920,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":119,"dns":3,"connect":9,"send":0,"wait":8,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6820\r\nlast-modified: Tue, 15 Apr 2025 21:25:41 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5EsqJg3M51IrWBAfSnahGI%2BiTpeDolFNInptKlFMtd2fn2vpmmfinJP5xgB13mpY3djkckBRbNDLNLJ3%2BWa006tq0%2BY3xM%2FitsxczSPCCwMcr9qC9aXr%2BqNebD8YqZ0BRKg1YDmt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e16cbff05ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-09T20:47:34.001994Z","times_seen":340295,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/dist/a11y.min.js?ver=cb460b4676c94bd228ed","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-includes/js/dist/a11y.min.js?ver=cb460b4676c94bd228ed HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 799\r\nlast-modified: Tue, 02 Dec 2025 23:03:17 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KHNYyZfLLr%2F%2FEh%2Bl0k92H3EnZO9okNoALzqnurgffE5SyGWZmuDvkJNVZ7afPsbQX%2Fh%2BF67puiB%2Fh7Ya%2FOgEniCOvxF%2FzoI0sAnQD1ldBg16HC9SOzpe3ZZNJ9FwAhWg1QLJ6eBr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e16cbff85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2212,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2176)","md5":"fc6bf7359b5df821cb6e4f8038a53296","sha1":"7168a225d0e23b428d528a4e1fa0e59fbfa6dbda","sha256":"c99c0a54cd4e1b44926d0bbeb3fc307a12349389648bce3c47370a26897c41c2","sha512":"fd181c0b210d7b406e9796417dc33ca4ac7b87578673ba97b99ac2eb1705aaab28bcfb9b7aee83a7c194bfc469fe3ae3ed278bbd2a491483902b58a09d0543a3","ssdeep":"","tlshash":"064151723490757685bf35f79c6e93c6bf34ca213993d0949a0c9eb53239c9a2139b90","first_seen":"2025-10-27T08:47:54.302436Z","last_seen":"2026-08-09T08:36:37.269863Z","times_seen":35649,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.3","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/autocomplete.min.js?ver=1.13.3 HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2718\r\nlast-modified: Tue, 16 Jul 2024 21:28:02 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iLaO7%2FuDQwNEtj%2FUZSr7w%2FbYGJMZvvifHArg8%2Ff4%2BvYLZfhvG83qIg%2BQkGVrRPes7H4Y7P0OeSL4rZ3lToozHJCk2SVUXtDWoRkJTr75V1zdWnlpA8Tc1C2VUGutuCtdgsrvGlcJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e16cbffa5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8536,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8349)","md5":"6a53e18a345b37d4f72262a071684e79","sha1":"7269f0f9a41ca95df23387e1c4dad415f0228979","sha256":"3ab937ae57ef4a48601774b6a0cc701482a5c8bc126fcb677db4842b3a3c0003","sha512":"7f1b7ba5ebafb6e1cb9791ce8a0ad6eec1a743e6b15ad3e2d05f38ecf9a7f3437e41f398d3a91fcfbd294073cae25c4e4f6b5fc96526828071a0fc5ee0327b78","ssdeep":"192:7r2AeY1jWBoYfgZn+gSEmaAGCkHjpXCNd882E9cNS/JWmx:7r2AeSWBoYfon+gSDkrH1XCNd882E9ce","tlshash":"8102845f365a6a4156efa078616f324b623a20aa5801815cf47c9fcfad3ce1432b7d7c","first_seen":"2024-07-17T06:42:32Z","last_seen":"2026-08-09T20:17:08.429593Z","times_seen":17945,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:49.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.4 HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4940\r\nlast-modified: Tue, 02 Dec 2025 23:03:17 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vWYn3aiounUhhID38D2jbhTrGShnjszSjhQSe83hu4qmtUDQ%2FzcVQu9H3L00e8K9k5pIUDH5d1%2B8GaaXOmSdSTn64gS1v6tgWgCSDXN59uQ3OtIcdrVVz0yqVqUC9khZ3g%2FMq26U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e16fad735ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-09T20:45:11.464033Z","times_seen":310752,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f4dd.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:49.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f4dd.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 21:56:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:22:03 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 26\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2140,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1ec53c5d89c0291001989a36716aa9a","sha1":"c95a532fbf080446ff45de6a7ede259bc7b1ddb7","sha256":"2da171deb90da583dc32b200cffee0535c00362dfe45fb3bc8df7e8f58e982e6","sha512":"7c6fe1b924ca854b3c87b9ac67c10050605404a249f990cd080221309d11d0cafb3459bbe3ecf88e810685be7f15577562dcfc4e1ddce3e0c98d6d4d80220675","ssdeep":"","tlshash":"294121c95734a1d9c5efebd38f2960cc1689715cdab395c9a08aca8d4087ed7fa80e10","first_seen":"2023-05-21T09:29:56Z","last_seen":"2026-08-09T15:49:01.399498Z","times_seen":881,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":127,"dns":13,"connect":7,"send":0,"wait":8,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f3b0.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:49.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f3b0.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 21:56:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:26:00 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 26\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1940,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd75504bd8a4810f750bdb5a94ade84c","sha1":"99abb72f7640bc3b40ea1c05aaed6ec5f94622c5","sha256":"87eea51e11f1301207f08c548815bf770dfdf6f48ab6177095d2a4c2a74fb4b7","sha512":"7679cd230a692a0f8310ac590d1f9d00e971133fa36c9759f425f5c0b8beda5949211107cafbf2c9ddf74a943a86324044e8e6bd5ca2489da3148215e10fb57d","ssdeep":"","tlshash":"2341e1cc917177cc9950faac7fbda1c1065b87d81334d1847369ef28448f9d13a62848","first_seen":"2024-06-08T08:01:12Z","last_seen":"2026-08-08T13:10:45.841833Z","times_seen":1090,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":119,"dns":5,"connect":9,"send":0,"wait":8,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-content/uploads/2022/04/bahistrendi-favicon.png","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:49.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-content/uploads/2022/04/bahistrendi-favicon.png HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 1396\r\nlast-modified: Tue, 28 Feb 2023 08:26:56 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Y3WRSCM3BQbxV6ylpSubpwi1j6stbF2ysSDOvrXR6r0z%2B%2FscItMAeSoWIo1ujiu%2BW89ZZij7aUZDLDGQEl5tJ00v6rMGkpzfXqsbvKL3YvKV1YWnjCAhAvl7dD0EFd86BqMihhl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e1734d005ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"b3b4ece21b5c92d6dd85337900ec301f","sha1":"683c9769b1af29e5491616f3ddd0c415ffc1f366","sha256":"c5af27c9ca49da2cba735ab20622e3687d669ba24eb20ba97211f2b329ae2a7e","sha512":"8154bf5f0af65b3a6faa8d2e96a44415a5fe2568604a65aa6e34e8a46c8b53da64704977be55534a478e5032745b379bd4123d7ed2ab04865184910fc5289341","ssdeep":"","tlshash":"0a21b80bfa4435c35156e17215fe64322d110cd0759ce879694fd0971af03b5c47d5eb","first_seen":"2026-03-24T00:38:24.108632Z","last_seen":"2026-04-22T21:57:14.362149Z","times_seen":3,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2118\r\nlast-modified: Tue, 02 Dec 2025 23:03:17 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u2ZR8qbS8zsvrTK7WsINQXknDGU66ZtjWb4GupyE9f2BMhduvziaa2g7BXQMRSqsRm4zBdph5%2B7zpulYuBF0lQ%2ByeJc%2FAjLHj0aZFjHMy9Gf8YIFPMHJT4bwpzZ5S6M3NPg32CX4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e16cbff65ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-08-09T20:45:11.468505Z","times_seen":200868,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-content/themes/pokatheme/fonts/poka.woff?v=2.1","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-content/themes/pokatheme/fonts/poka.woff?v=2.1 HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bahistrendi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\ncontent-type: font/woff\r\ncontent-length: 3905\r\nlast-modified: Tue, 28 Feb 2023 08:27:00 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jm1IrNxiyZEmqLsQb1GYz%2FeQvOb2qFVhqpGiTjPjUMVGaD%2B2q6gjahDPzcaWzPg89%2BrF7dpUS%2F5BlowVA2Hbi57ZKovZjYIfsCn0JOtLiBPfM3tPlGSu%2Fli7e%2BU23YTSiQ7v1CZw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e16c5f025ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3936,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 3936, version 1.0","md5":"5e4a8958c8d1238dfe0b49224080acda","sha1":"945db0749dc20360134934954d1d96ce218b1e77","sha256":"3f9ec00e6d1d4cb4d7a98017d5a6ece28c957d6b979a75523f3427310d8e25e1","sha512":"dd0f66cf15b3f897abeb373cac2a4e5621302864f718f9cdf95aadd200da760bceb4588de5f823be600793c1843fcebda55c9d28f94635867c8a52f528143eed","ssdeep":"","tlshash":"28814b0bde31f160fd54c9fed98d3778ad2cab5c7a2454461c7152c32a134ea6aab040","first_seen":"2023-11-01T13:05:12Z","last_seen":"2026-07-25T08:06:34.186173Z","times_seen":15,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/X5lnzBQ.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /X5lnzBQ.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Mar 2026 12:08:59 GMT\r\netag: \"c5ec5b519b4fface55f4fc7b94fef176\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: G1rxNb-pyhY5q0C--rE01tDJXCBiljUrajhALaVvjtxKVJeDdfYA9w==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 655241\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\nx-served-by: cache-iad-kjyo7100054-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 138, 0\r\nx-timer: S1776895009.772423,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 11578\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11578,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 293 x 90, 8-bit/color RGB, non-interlaced","md5":"c5ec5b519b4fface55f4fc7b94fef176","sha1":"72b0344096443496716429011eadb2e67ed75406","sha256":"0ee421992fce13fe79829333f69493071d81b6ff71e7fa9793321a7d08168511","sha512":"075900086eb69d8fa04ea817a847c909357cb9f6092c41b9d84960d3e20a80dfd86f5498595be7e0a671c34c379d234d0ade1b6601f17dd315c3138c2256d431","ssdeep":"192:XlKB5fiAL+ZQywEEL2Pc8zkYBswqP6NuhfB45hrghsC/6V:K5a+d5U3QGswN+45ZE6V","tlshash":"5232c0bfd065df7eeb46790ba18772a184171f3e9cc058418c54fcb068ed72958867d0","first_seen":"2026-03-24T00:38:24.122223Z","last_seen":"2026-08-01T16:22:46.792218Z","times_seen":6,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/dd5sDPO.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /dd5sDPO.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Mar 2026 12:19:53 GMT\r\netag: \"df662a85a9fe4486adf612fb6409531d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: JOyW9MzqK0g6PmRaYpqKMORjewrv7_9Kfuwu5hBc76BNA8_s1n5Cyg==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1166790\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\nx-served-by: cache-iad-kjyo7100044-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 483, 0\r\nx-timer: S1776895009.771555,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 9660\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 293 x 90, 8-bit/color RGB, non-interlaced","md5":"df662a85a9fe4486adf612fb6409531d","sha1":"54360eadff680142d621c1ea84c2525338454f1c","sha256":"430dc9cf0c4d65948f56cb14f4a006524e1b8cd8c94da1d12ee82620b9ad8162","sha512":"01bc9e308dee6ed101428561b5c85a5840703e95ef7d5d1cc1eb694e544da70f05033bcd0d0761ad89cf8c111855a1725f84bc76c85dc510a17c60252491de97","ssdeep":"192:M1E8gBBHXCQf4dOIGBh7LqJk5fU461j8xds8OIM:98+Clij7LqKpI1j8xdsb","tlshash":"f0128ff3fb091009a898e4b35945d708eaf1370001f6ce5857eacb7b28755b32951ee9","first_seen":"2026-03-24T00:38:24.123772Z","last_seen":"2026-08-01T16:22:46.793253Z","times_seen":6,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29769\r\nlast-modified: Tue, 07 Nov 2023 22:32:48 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xDDVUNE9izIWnWy6GBnH4uijvX7us%2BhDiedEnWYwQk7iCcdFGAGvWu3CAbzY%2B1%2BoI7kuoYG8TPUuJudqtgH264XJ3bfv1y%2FLGTxHrlnTg8kHLSibtNweJoCcxhRenrO7ElBsfb7a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e16cafda5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-09T20:49:16.811374Z","times_seen":1012227,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nPrXyw1W3fxIlGzg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nPrXyw1W3fxIlGzg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bahistrendi.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19480\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 14:25:58 GMT\r\nexpires: Sun, 18 Apr 2027 14:25:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 372651\r\nlast-modified: Tue, 09 Sep 2025 18:38:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19480,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19480, version 1.0","md5":"bc0d51a55b8ad173adca939390c96045","sha1":"ab757e9eec9f39949afd92e0d2d2ef02f4a859e1","sha256":"d1ee519d0cac55030ec7cc0927a7e57e324d40a5eee5024dde5ed107d888aa46","sha512":"206f7610005d160e3af9fe67ece56868a8f5f2e0afd53ce7a34d022a7832f0100f72779139ea37265c23cbd690e680694cd6c264c198266a1bc561801f0eaf5b","ssdeep":"384:2/bUzzda1Rx/5cod5RQDLZjNObIbbkzJulFGzk5mm+KCnirm6:YUzpMRx/5HRCF34zIFkk0mOl6","tlshash":"9992f1123267a804c15c3a39f67e8e03e2f84a2a35b595a0f95f16d8831c2787126cbf","first_seen":"2025-09-10T18:44:19.134845Z","last_seen":"2026-08-07T23:21:56.44452Z","times_seen":2085,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":107,"dns":2,"connect":22,"send":0,"wait":62,"receive":5,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWbBXyIfDnIV7nEt3KSJbVDV49rz8tdE3U3f4I.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:49.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/rubik/v31/iJWbBXyIfDnIV7nEt3KSJbVDV49rz8tdE3U3f4I.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bahistrendi.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19140\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 01:54:53 GMT\r\nexpires: Sun, 18 Apr 2027 01:54:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 417716\r\nlast-modified: Tue, 09 Sep 2025 18:30:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19140,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19140, version 1.0","md5":"6387e94131c6621a7513614976c97c8e","sha1":"9101807772c28206ef8927a751cb5f0d1aafb62d","sha256":"6f2f041a86279a1329ba7aeedd89a5b86b7d7c373a809590edeb482c0b866ece","sha512":"83a28ca4529947548d7d548f9155d6326bfecc1789d502f1f95141448ebd25ee7bda36efc63300f02712bf13d82a4ba64ff4e927378855ee8d16cebef1e1d285","ssdeep":"384:lHUr5wtjewWu4V4K7C+heUnkwRCK65vE4UJcXcGYt+FH0YbgFkTFk90:lWPub+hUXE4LXzN0mKW","tlshash":"6b82c0b815cd3dcec97ee2b3a9149cee42801ddb17681ae390cba360b52e7755313219","first_seen":"2025-06-08T21:56:45.288861Z","last_seen":"2026-08-04T10:16:52.081962Z","times_seen":415,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":59,"dns":1,"connect":21,"send":0,"wait":43,"receive":7,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f512.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:49.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f512.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 21:56:49 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 276\r\nlast-modified: Fri, 07 Nov 2025 05:25:34 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 26\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":276,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"85e68275b969dee2025a71dcd34677ab","sha1":"c5bd5c1ff124b6e3d20661962b6dea063d30bae9","sha256":"da529c0b4b9c509eda412f434fae8c4a950cd11c0da7906b4e0bfaabb6d9d869","sha512":"8a325a231e0a5f3ae59efbad882a68e696c57e4705a99aa10f63dd080c62efbfaf8b6ef38e6bbeadbdbc645616a459c6a3f887f7f5580b795a6afb5000a60510","ssdeep":"","tlshash":"d2d02b7d662c481c402347905d24f44d434d3062324f00ff619d4d792143fbee607d18","first_seen":"2024-04-17T02:46:22Z","last_seen":"2026-08-09T20:20:51.948525Z","times_seen":1618,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":121,"dns":9,"connect":7,"send":0,"wait":8,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-content/themes/pokatheme/css/styles-vendor.min.css?ver=3.4.9","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-content/themes/pokatheme/css/styles-vendor.min.css?ver=3.4.9 HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 10880\r\nlast-modified: Tue, 28 Feb 2023 08:27:00 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nqP3yopMrsQ0E%2B1GO3CYOKJXal%2BB6yzWhPzCCSOTpAJ%2Bro5dVsyq1IWasNMBuzcgvqiyhDnqoFO2T%2BzPUXCzVMKBk2yHa4YxGR7WQiU%2FU0CAqlGVbWVLBiKII6tp8W8SimmrzteT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e16c5f095ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69371,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41104)","md5":"3d7b7d85a49d6b0686c052e05c8cced5","sha1":"ae8002be1d6bb853e56d26f86482dfbc2211535e","sha256":"cf3e5e5ebd6358e08783b29ce38ee4f0e3962b46f2601b6ea940d366d6c260f0","sha512":"2042ca1bc8932c47b695f542bb81a12d829df91969cc8caf70ff892ac415218a595bb9fc39b4bed433f5af235326fdfa834fb78211b5004a38424e30524ff252","ssdeep":"768:JnDHyHexBWtiXCatoB/EN5GNoa5lNbUD5gtiJDi4PdE6:J7B9SB/EN5GNoa5lNK5gIxE6","tlshash":"da63b5f3e461269e5017ce2d63c17e6a125e8153f6324ffbf2226d514b8ba8b0473a47","first_seen":"2026-03-24T00:38:24.115287Z","last_seen":"2026-04-22T21:57:14.377183Z","times_seen":3,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/B5pDcTn.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /B5pDcTn.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 11:05:39 GMT\r\netag: \"1041ef03e8fb318427e6f0bf45e6f2a9\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: 4Ye6NqyO8tdTiwFRdua5wqvMrPBUDd3sSMQHB2oNXgtojedOQD-aaQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1174488\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\nx-served-by: cache-iad-kiad7000038-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, MISS\r\nx-cache-hits: 524, 0\r\nx-timer: S1776895009.771431,VS0,VE109\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 17048\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":17048,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 293 x 90, 8-bit/color RGBA, non-interlaced","md5":"1041ef03e8fb318427e6f0bf45e6f2a9","sha1":"b09120f6a3bc0b8c55c6d3b8deff1f1f695a30c8","sha256":"f8b0f57987376b96599519162348269eef56045a77d356753fea2a1c9fb62632","sha512":"cc93cd3356c0f71b5e9e0902abf82e880fa2515e986533ab10be066e821db5ac04112bcd0940f1bc7482af618cdec504097377cbb480ae08257d06d8fb3031e4","ssdeep":"384:mNS08nE4VsmxLcerPRyzDJUceEZxEMsGjonyF9d1F:mNasmxLByzmcFrsGCu9nF","tlshash":"f872e15d90a0e7909c4ff20c81588aab16247524f06b637cdf5e7c883c96b36c761cbd","first_seen":"2025-11-19T10:05:21.6509Z","last_seen":"2026-08-01T16:22:46.796595Z","times_seen":11,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/gpvDO9V.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /gpvDO9V.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Mar 2026 11:39:11 GMT\r\netag: \"f3e34ceaca2700b47e81cab65122932e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: S9tV8EBdyDSdEKd35CF144EsPGJwICX7mZbStDqY5BjcFL0JU-rBmQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\nage: 643399\r\nx-served-by: cache-iad-kcgs7200174-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 419, 2\r\nx-timer: S1776895009.772205,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 15108\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":15108,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 293 x 90, 8-bit/color RGB, non-interlaced","md5":"f3e34ceaca2700b47e81cab65122932e","sha1":"4dec2215aa342543223d761cfa61c6ac8bf9950a","sha256":"daa1d118065af29d78e4887ae07f39d721a9154dbe0cae611ae684f718974d02","sha512":"67d62eddb1e55204ee5b73acbb6e060770aa14bfc85943dce8003f0b48c24b8af52c9add0c1a43c6bddaa42e1c1e34181326e764ab1c211725834c32a32689bc","ssdeep":"384:Z+l0ban25GxvM/lgJ7pTRscaSWDxmbyqjF1i/6ifZeIZswEn:o6bO25+M/lyLsDpDxmbyYuSw/yL","tlshash":"2662be8e1612c8a8969b93d5c7e418fd3a132f4878055ccfb1e1ed02e757e829291379","first_seen":"2026-03-24T00:38:24.141137Z","last_seen":"2026-08-01T16:22:46.797577Z","times_seen":6,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":18,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.app.min.js?ver=1.7.8","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.app.min.js?ver=1.7.8 HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29908\r\nlast-modified: Wed, 24 Dec 2025 06:39:34 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2VpQW3XDJpOA5qEJbjyjVMlYa8gA%2BXJz5iXBfg1FqI15JSq%2F%2B%2FKTd%2FjDOqtYJ1Vnz841Za5BMiIkGjak2mVlNlFgGL3kloloZLdjINTvVFSzc8UEzyQFsUUVIfbeLszSk4cFeUlq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e16cbfef5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87478,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"4031117922153771ac02e7215eba5074","sha1":"65d06636dfc4c918ae149ff2ece13099f9921857","sha256":"2e6b64b2e155135d29959ec0d024b9a629863c378863a6ece4b54c7d9effc1e4","sha512":"6f52e59abc459efa5ffc448411fbe07d59e2db37c13724a116a711a736f7b9a7814446744f7207104dabc9c5471c1c683a9fe1d5e8432b24d88b78d835ae282e","ssdeep":"1536:X+zo1GZGM+xTWaxsZs0JTKzvzokaggU6ExcJBXvtS9Zt8yFpVHyzxgKZZuMg:XutK3omIHtS97zEgKjuMg","tlshash":"1b83f9ddb2cab02247a771b9007f550bf2361999280dc410f159e8e9bc78a4e927bf7d","first_seen":"2025-01-28T17:58:38.93127Z","last_seen":"2026-08-09T08:04:20.371254Z","times_seen":2446,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381 HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 276\r\nlast-modified: Tue, 02 Apr 2024 21:28:54 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hBYxd9hmiaHj7xKxJvZB%2BN2An4889zW26qgRh50hj3RuPaKpUneDttU5%2BlPUjWSaktFP1jcyqfcaO4qFKEpVjiMxtk7y9ov11x9gM6ddQ94fN8%2B8KUprJ5Jqri42dYn13a5TS8h2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e16cbff35ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":457,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (422)","md5":"e4bc17cc45ca91ab0f09dea134975c51","sha1":"3c03312717fb495c051d02a3d27ec0d8abc2557d","sha256":"5a43a22e48f94b7a45a9a9b1a107f197213b73307fdfa2e6b2daadab264f94d2","sha512":"f8e537a2168b94875bb7ddb9a20037c5bc79831c8b4e726f224f8d7c723c5c4b4512551697cf7bfb6ce4b5f8365dc1c027107ffe3435ea27c686f5ae96d921e7","ssdeep":"","tlshash":"bbf0d4705445edf071bc80e6442d53c1b5219039372270f14b8cdcb569e0f96127ede7","first_seen":"2024-04-03T10:12:48Z","last_seen":"2026-08-09T16:05:16.569276Z","times_seen":108071,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bahistrendi.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"www.bahistrendi.com","domain":"bahistrendi.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahistrendi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 17:31:22 GMT","end":"Sun, 19 Jul 2026 18:28:43 GMT"},"fingerprint":{"sha1":"D4:32:49:B4:FD:A3:99:C3:7B:33:F0:23:F0:27:DD:F8:BA:F4:58:BD","sha256":"BA:FE:F5:5B:A0:5C:3D:D6:00:04:45:80:A2:3F:95:73:04:32:B4:4E:67:A7:D0:EF:84:67:05:18:94:83:A0:9B"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: www.bahistrendi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1855\r\nlast-modified: Tue, 02 Dec 2025 23:03:17 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZ2aLjPa%2BqYAOOTSgxV99Sy6T3IxbHEJEBdJFnG%2BLU%2B42fWJC2slrnDmyT2%2BacMEcoUt2d2t7RdgXPNA%2F24yfeSDmkOUiG4TM5%2FVx9ElVU5ABknLO%2Bw3GclTEcKwpoZWfWoI8A%2BD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f07e16cbff55ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-08-09T20:45:11.402048Z","times_seen":203931,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-22","alert":"Phishing Block","trigger":"www.bahistrendi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"www.bahistrendi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f481.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:49.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f481.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Apr 2026 21:56:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:25:34 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 26\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1583,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e3151f4a7f87ba845f0b961f67cec5ca","sha1":"9ff61cbcff6c851c43f2cad891fe84ee47155a7a","sha256":"2f0e357ce29968b07260c75944c05e22425fde8b51f31df5880e627568e4d026","sha512":"a8182e14ea3a0d622e1ca6b9fd74d817768c5cf2e4eaddc3921d47b288ea249c9505db77db7ef0a9d952edcf1486f95d266b747a2a85d3943767b240fe8e6655","ssdeep":"","tlshash":"c13111d46638b1d4994b9bf99f5db5c533c9246ec78902c47081c92932abb9fbd08e40","first_seen":"2024-08-20T03:39:53.797615Z","last_seen":"2026-07-31T12:18:35.933775Z","times_seen":17,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":119,"dns":0,"connect":9,"send":0,"wait":8,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"centerofseo.com/img/1xbet.png","fqdn":"centerofseo.com","domain":"centerofseo.com","tld":"com"},"ip":{"addr":"217.174.148.128","port":443,"asn":57344,"as":"Telehouse EAD","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"centerofseo.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 22:54:41 GMT","end":"Mon, 20 Jul 2026 22:54:40 GMT"},"fingerprint":{"sha1":"8F:C6:A1:6C:19:56:09:17:80:48:72:38:CD:9E:54:CD:72:BF:F4:71","sha256":"B2:8A:5A:E3:78:B2:4F:CE:8D:C3:34:0D:92:00:4C:AD:3D:6C:59:83:F5:9E:23:34:89:EE:29:B4:DB:6A:CC:BF"}}},"request":{"raw":"GET /img/1xbet.png HTTP/1.1\r\nHost: centerofseo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nlast-modified: Fri, 07 Feb 2025 01:26:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5161\r\ncontent-type: image/png\r\ndate: Wed, 22 Apr 2026 21:56:49 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5161,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 293 x 90, 8-bit/color RGBA, non-interlaced","md5":"300daa60860086aa4b994d59ac8c9e63","sha1":"e0cf75892147a5ccc495be0a7c24c8e51eae0a9c","sha256":"7be95f1943aa2679cf8db6092bd8322c3628a0de0bb37c66d58fa5aeb395571e","sha512":"7365c6032f290843a49e96d465773d3520b9895f7aef6aac3d38f9766e8502b51cd02c88e6e97aa140b7bb6e890c22d4a4e2f704c1e7f882071ec72199bbe919","ssdeep":"96:tSXkaB5P6phmBtKfF1PGNtzqH/wDjMnD56r3NGAdCf/NixCkpY0nYI:tSngp/NGNt2H/rU3NG6Cf/M/pYUYI","tlshash":"69b17de970e55deca772824783464efcce064cef7361c94c3b6999085969cca211339c","first_seen":"2025-09-22T18:41:15.646017Z","last_seen":"2026-08-01T16:22:46.787963Z","times_seen":12,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":215,"dns":0,"connect":0,"send":0,"wait":53,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/eM5QqNw.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bahistrendi.com/","date":"2026-04-22T21:56:48.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /eM5QqNw.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bahistrendi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Mar 2026 11:59:56 GMT\r\netag: \"fc4f05aedee1c3c948ff461eea76c4f5\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: d0e7j93OSUX_xw5RmmwldVVcJM6N4-j52MuZX-kqWlSoVO4ccZvWXw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 369313\r\ndate: Wed, 22 Apr 2026 21:56:48 GMT\r\nx-served-by: cache-iad-kcgs7200093-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 140, 0\r\nx-timer: S1776895009.772219,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 6312\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6312,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 293 x 90, 8-bit/color RGB, non-interlaced","md5":"fc4f05aedee1c3c948ff461eea76c4f5","sha1":"61a7177e78d92f967d34f562194223032f1be18f","sha256":"f836081febd8f6f2e9935dc132a7b18d1d19e7671f8a4bc333b9c03f627358a9","sha512":"82369571b8cd3765a49ff9d5d3344ed176f7e2efe2e4dcce970d00a9096d33f4caba564b50501fb85f22156707b078b797927d87e2d507a6c3bdac44ad2c223c","ssdeep":"96:bbn56DrFSOIBdMaE+/wCURP4O+IWa5zLb+HslnMori//gC6yJA9itL5lrz:3n0gOIzMaF/RU9MISMlMii/bTEitLH","tlshash":"29d17ee678b1c86e6c12ab83464f9463d7fe548126cf4e716372835ced81718875d003","first_seen":"2026-03-24T00:38:24.146202Z","last_seen":"2026-08-01T16:22:46.788894Z","times_seen":6,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}