{"report_id":"cf97b367-9071-4151-9567-448afa99bb67","version":0,"status":"done","tags":[],"date":"2026-07-04T12:18:43Z","url":{"schema":"http","addr":"bahisguven.com","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bahisguven.com/","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"title":"Bahis Güven | Güvenilir Bahis Siteleri İncelemeleri","dom":{"size":48870,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8856)","md5":"aaf150634efb2ff7de0af4706e55b720","sha1":"fca2cf6dd1dbc07d93fb5cd8f90bd5da829c8589","sha256":"907a7de874674cbba9a95dd4b49502ca313d0c62fb792fc8dac2cd21ba28084f","sha512":"c238f6cc82dd37b7e3f5409f13c42dfe6d1fee8f38142d81cd0fa765756c8a5a694451b5ef0cd9fd6ed35cb8b4689d14f36770edba276d1b5e484052212d84cb","ssdeep":"768:02gw0IzbLhDY6wSSrz/e3NvZdapz+2NYaQv8ujpRvBtFI7BuHePgIi12uyOo8/:0irapC2N2pHePgIi12uyOo8/","tlshash":"062372736049181b2bdec7da81137f48e197f43eca16cad0b6f761cc9291ebb1163629","dom_hash":"domhash8719db2aad74f05df6cdae87becceb26","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bahisguven.com","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-08T12:18:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bahisguven.com","ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-10-03","domain_rank":0,"first_seen":"2026-04-04T20:09:39.750528Z","last_seen":"2026-05-28T23:56:13.335651Z","alert_count":172,"request_count":43,"received_data":915049,"sent_data":22032,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Redux Framework:4.5.10","description":"Redux Framework is a modular PHP library that allows developers to create customisable settings panels and controls for WordPress projects, providing a consistent user interface for managing options and settings.","website":"https://redux.io","common_platform_enumeration":"","icon":"Redux Framework.svg","categories":["WordPress plugins"]},{"name":"Yoast SEO:27.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"imagesLoaded:6.8.5","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Magnific Popup:6.8.5","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"WordPress:6.8.5","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":1,"received_data":17723,"sent_data":567,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-28T22:19:26.805281Z","alert_count":0,"request_count":7,"received_data":354059,"sent_data":4000,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/js/masonry.js?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99d6be6f56fe8d681d7a629173a98663","sha1":"7a2e2e50640dfd92a352143c84ab1df2b4c374b2","sha256":"8732adc8bd0c629fef78a6e39a2afa14bd4de3d0b7768699388e55a4e6500f20","sha512":"4614dbde1cd1d86a72b98692971a1f045ef01cb1ba2bfc77b6b9228a6d8ebfb80f12e1deea9ca5578e62c4398fa81adfa3fec147ca9da0f7ffea8f47be75d859","ssdeep":"384:nDeqAVuvMtz0BFoeCreiMIz6lMyevWXPp6h6E5bPgfXxN1nAvPo1kSBo0:DX+z0BF+frvghzgbPyRnUPIz","tlshash":"e0b2c64ab700b4309247f1a6a5af010f733ba5ade90994fcb285d8fa6db584c1137f79","size":25258,"data":"","first_seen":"2023-03-07T12:02:21Z","last_seen":"2026-07-04T20:31:34.108679Z","times_seen":372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-13T07:17:37.005331Z","times_seen":885629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/js/owl.carousel.min.js?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db4c9c39a3af9343842156df81f25d08","sha1":"36af2c0bc454462355584a535897ca5ec6371f3a","sha256":"e04e2b4e27ae9881b1e161954cc00ba16c8c3a0ce73a179824756353efd6c481","sha512":"c402feb4cc9c11a4d2d30c8abf9f4f316e4115c1ce8cdde6df4645a904b5a864eeed249d372cfd52ee0d9def6fe50734d87f4ff4501b477882ef4708d65f2a68","ssdeep":"768:MCcZ1I6+gyfJ78tKOGOrnepjMzZG+uluJe+KSzVc79ThcGP:1cZelJ78m2cw8","tlshash":"70038446b3302d2a8a9b91b0663f020bb13b241de415947d797d9ade6d79c4c213fbb8","size":40402,"data":"","first_seen":"2023-03-07T01:36:39Z","last_seen":"2026-07-13T03:52:47.999188Z","times_seen":1756,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"74b4a9130f3bbe340d91901a9a11d4b1","sha1":"0af8f3dd955d9e914969415893391327ec57752a","sha256":"e7f9808b10939e5184130178a4222b9db47021f3e91ad827bd784605126c1cc4","sha512":"f24938b3f72a8db5f66ecdb31943634c83bc0e71efc58ae812a58e769afbd34062cc709dc3b07bdd5510eead9c2a5cf88140054a72b63323b09d2c59a11decb7","ssdeep":"","tlshash":"9a61ab9e3775348b32b604d16a3f4e07fb7258361688d034c9b5e7541cb1463d37ae59","size":3409,"data":"","first_seen":"2026-07-04T12:18:46.578248Z","last_seen":"2026-07-04T20:31:34.125424Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9fda0e72b5f06fcbeb0d9e76359858d","sha1":"b547ad1be6270f1cb283cdb3e3c7272af8e9b6ed","sha256":"cf45b8980993e85c86032e38cf2f9640241e49a4a8278ff08faae797f3be4d26","sha512":"fc674aae9202dacd4ac7deb5db45e1065f65952e05387020c6e6f42af70a7705a0e5871f61623f4dbb1a1c88dd20689be604fc0b8731fdb1a36e53aebea1c8ed","ssdeep":"","tlshash":"25a022320c000b0b3ac08ae203232f2a02a2b03cac30c000bca32080000002bbc20000","size":63,"data":"","first_seen":"2026-04-04T16:22:39.295652Z","last_seen":"2026-07-04T20:31:34.126798Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6cbe117368185cf00833dcfc03f79e8a","sha1":"5bbb5100aa6d83c7707ad883ed9edb5fb595a17e","sha256":"26b3a7505dee50f447e98bc8e1325574dc9b223d1fbd026b2efebd5438e190a5","sha512":"cff5525aa1efa984c9b110388c171528c33f9319a82567b8cdf1d1bd77cb6b5a9945a48e9247d830a0920107409010670f932308b9106d4d76df557e9a41efe2","ssdeep":"","tlshash":"f0c02b1032dc129f166978f4380dd09362c2796027690c00d0c4c4dc6eb6f00ebdb30c","size":137,"data":"","first_seen":"2026-06-30T06:41:31.679132Z","last_seen":"2026-07-04T20:31:34.127977Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/js/custom.js?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c743bd85743889c158829182542936f0","sha1":"c9dff19b097fdf713b561033529df3049c958d52","sha256":"329a2a8d4dd3658411b5c1b9312a8828f6f5a312e2b6c3feb626c742ce7392db","sha512":"4e5c1713bbf3945e85e5d09b42c0f08188cd52e4a2c69384443d207eebae54cc6b9fbb41326a7585bfa816cf5bffa260024417427325ea8a0c9d0117a3b8bfec","ssdeep":"192:FmdRpE0W98mNAXQJHM/8tsvolVfK35n71+HmJaTEi:eRm5em2WHntsglVtTEi","tlshash":"e46240c4b39e6a6e41ef7155553fe800ee7ee833860251b4f4fd10b4aaf4a092366d6c","size":15749,"data":"","first_seen":"2026-03-24T01:57:19.56699Z","last_seen":"2026-07-04T20:31:34.120949Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-07-13T07:06:45.101622Z","times_seen":210616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-13T07:17:37.052097Z","times_seen":964390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/js/bootstrap.min.js?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78476b6f9ad01cecf085ef925cd671a2","sha1":"57ceee2c841f35dc0652dcfa88ce55cccdd72054","sha256":"5dc852fbb9a952da8184604356e226848cb0924ba8e654c6eeb478f67446dccf","sha512":"37b04d0d15bf074f00d78efbcbb62010c66d8b006f5ae86290eacabb88a74313f37f09459cc35949a5b25c00c6063e171df38196298500f0af9fcfa64521f5c8","ssdeep":"768:po2wPPImkq6IPaqPZXN/SmffVPKugfsD4joOiA6/l:x0V1DuiA6d","tlshash":"c7f2750ab13131a107efb1a1511b0a0e7235aa3de546817c78b9d9f22db9c48727bf7d","size":36768,"data":"","first_seen":"2026-03-24T01:57:19.498489Z","last_seen":"2026-07-04T20:31:34.120273Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/js/responsiveslides.min.js?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dcac2ee0f3faa3dfae4b45ae491e8fb","sha1":"6e3305d938932653ab30649db9f6264826735a3a","sha256":"bc291b0ec180b9287fddb86a707ef6afbb18473f440819eb56307034270d711c","sha512":"dbf06efce7618222ac71519e0b9dbe73d847cc6e12e475ce9f777c307b484822c8b3628105f93ac1df344b2b29d1202411943b68e3c7ce966b2d1667b2bb1dd1","ssdeep":"192:/q32I6F6tnAN2y9NNJnkIfGR2mK5xeMphiAFiwi+v4hgKtJgzwWwORT4Qw0Alil:/rFMnK91GRPSxXBF4+vw/JuRTC0Alo","tlshash":"0042fc09751525b90c3bb33aab0ab50def6551339222d5553cef07881fb069882a6fff","size":12262,"data":"","first_seen":"2026-03-24T01:57:19.563243Z","last_seen":"2026-07-04T20:31:34.111356Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/js/jquery.magnific-popup.min.js?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a0d19da1bbca376f2484e4d2757993a","sha1":"755c2470daaeae7290969bd02d343bb267683c66","sha256":"29649dd5311ae06eb0639f2655f35be5da744bf41556d1a1c32d326994d77869","sha512":"1e372471a0825aaab93e212c11ba5976327ad300105f0a034f8294311c826c42e7843737c2638ce740d8a9afba2ade25443555783d415fa8a92928971e9ba948","ssdeep":"384:v4mrxoiMoB8uxsARrbXEBwCrSQX6GSnL/LuCcQjy2GuPR592rt+7U:gXLm+Hx6GSnLbci0uPB77U","tlshash":"32920868f1a3b11787eb75b8696f200d3b72a512c90bc011725a94d87dfde899127f3c","size":20950,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-07-08T01:00:11.505487Z","times_seen":444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/js/imagesloaded.js?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92742cca098dedbb9e365a16a7f538d7","sha1":"a63813de99cb0d1aee18c38f73aeef493f4c0dab","sha256":"f1f82c2db13fa9b0fe2c53cf02c500244ff0fe7b33f42d8c5c7e4c5530f3728f","sha512":"350c92add22c5c3af29bcc65923ba4af6a9bc1845d373e181e2af67c30bdc412300932cc77cb18f0e30af88a7ecc2cd0bd51f70876887c654fa093e135e8abe7","ssdeep":"384:cpwaJFkwLHeKsKVqzbQx9L+JWdKZjKGfHhs0DreaIPmaYG5RB1MF2gKrZbD:cpwaJF+KseeUx9L+8d+Xsgimk502gs","tlshash":"13c230c67f8b217744b5f36b773a2249e238c1a75214a244b98dcee02f74858817deed","size":27534,"data":"","first_seen":"2023-03-11T10:15:06Z","last_seen":"2026-07-04T20:31:34.098083Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://bahisguven.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"bahisguven.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.780Z","timestamp":1783167500780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 13 Oct 2025 07:10:49 GMT\r\netag: \"15601-64104f78ab040-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/javascript\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qVRNRpbgo5DOBQZ4b4sNPzNvgYhnLPz6PuAvVCgIUF8c3bDfmAwH7dKmd4zMv2hm8llp3FhKHLKkU0Z5ZzIS%2Flr4E18OgAzG%2Fp1KHFgg1AwhwGNmenz0CmphdTr1drYiaQ%3D%3D\"}]}\r\ncf-ray: a15e126fdc5f0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":31124,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-13T07:17:37.052097Z","times_seen":964390,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/betine-300x300.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.075Z","timestamp":1783167501075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/betine-300x300.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Mon, 19 Jan 2026 17:20:39 GMT\r\netag: \"12a8-648c0e8f47511\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5HczqSmeRM4H3wgaZsRD%2B3RbXswUlB6wRXaHxHB6nWNP9%2F%2FIy%2BDPxKjUSMgwzaPZ1nz9ec3GFk5THkibwAk6%2Fw3QFGMVgJ2TUFLtfXKJrFHokSifHAiDZ3gyHauwv0FGtA%3D%3D\"}]}\r\ncf-ray: a15e1271bc820b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4776\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4776,"size_decoded":5490,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9182746017ac2e2deaf20db0c2aa7fcd","sha1":"e8d6139e0c07da86aba5223969656653e478e875","sha256":"e2bf33464c1b619982b5125dcebb7bea4844694e83aaa4b36b2659fcf973fc93","sha512":"a856ba97f37e0e59fe68867a1c95b73db0be7ecb34d3b17d1bd88a21951300125a3ce8707781344190c89eef1f107b38e2ac36d9edb2c83330668660498d6b2e","ssdeep":"96:xaN26MT0D5MdtbZPAVwzVLmNr+3uw9Weil:xNYNMtKwVmQ3qei","tlshash":"69a14bbaab22d2a5da20ea7c65f127d5e1d3b37483127a40316c6f1602814c09b8b16e","first_seen":"2026-04-04T16:22:39.246425Z","last_seen":"2026-07-04T20:31:34.123483Z","times_seen":7,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/redwin-768x768.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.028Z","timestamp":1783167501028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/redwin-768x768.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Tue, 16 Dec 2025 12:51:44 GMT\r\netag: \"14d6-6461130993800\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pvANW4hL8B%2FBvm2RLmN7%2FzTQ7MIGSyR9xZlQuOFgNTkvloMPHae7CpTgVnDEupxu4ToXoy9Yfw2K5KteAhW33LcFaZJcnU6U0OdaZp%2F5kX4WSFn%2B1gY0ztnrGOaZ4u600A%3D%3D\"}]}\r\ncf-ray: a15e12716c720b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5334\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5334,"size_decoded":6046,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1cadd294a4238c51cc12c5127a93a0db","sha1":"e1084ceaf5d5c110457270939278c31806b68e64","sha256":"0584a10d8db7757ea6f1e0e3b90e546778071a20ba1b8a22e120bda04791c19c","sha512":"8d0c38a0e1379a47e19b742a6a340e8aa269ddd4e5e3ef4564798c9d7e074cc257a728f23303156b5ee893a6fd47f73a4727335950bd2347dbf949241682cfaf","ssdeep":"96:EtyTS4ge9eimkERIFVrxGMeYoQ+oHNDoFCqHOqiOhxP/jnuiHHXw+9oW:EtNxeQkYIF/neYoQ+PbxfdLuinX53","tlshash":"feb193110044ace5a3049721dfdea5487f8bc1e236bb1989ffac5ce79a5e9708d52c49","first_seen":"2026-04-04T16:22:39.28714Z","last_seen":"2026-07-04T20:31:34.088354Z","times_seen":7,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/slotbar-768x768.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.029Z","timestamp":1783167501029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/slotbar-768x768.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Tue, 16 Dec 2025 12:50:01 GMT\r\netag: \"44c4-646112a759040\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wb7BG356QU9kUTJ%2Bc7duvC69Up%2B6QELIj5MBkchONDXxO3d2S8ngiuM9uWTfYlPu9Jtd6gs30XbqqvQMqSOVPKOasm2KrSyZnlN%2BezzWgrl6mgc%2Fk1YZCj4ccrdEHKoMSQ%3D%3D\"}]}\r\ncf-ray: a15e12716c730b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17604\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17604,"size_decoded":18317,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a4f58a5096fdb2bd39bd3cc02609be7d","sha1":"66e36ac86baeb1cc8b6849ae7de5ed0a763111a5","sha256":"56efa22f166120b3f463f5d38acb8559670073e0ccc2955c419542a550cf4c3c","sha512":"b2353d9095aab8f63abb94f22f796d1501cfebdfb0e82a4d6578393ee09cbfe158ee660f088271182c743e707833c929c5a9fec40fe502998e1e36e102729789","ssdeep":"384:rLCy4GmFQ0yY8SPTJ1myQL7MeLNUfgeaWspMmPnVw3sZoDZDC/mi:fCYsxPTbo7pLNUfgtWspMmPnVIsZoDZQ","tlshash":"81829d6c95acc8ef4fe31818e44c7019c1a77c6c1736a026a958b53bd085a2cbee70f4","first_seen":"2026-04-04T16:22:39.29114Z","last_seen":"2026-07-04T20:31:34.103582Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/betasus-768x768.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.030Z","timestamp":1783167501030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/betasus-768x768.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Tue, 30 Dec 2025 23:12:17 GMT\r\netag: \"125e-647337db2098c\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Z0Uc10t3ZuqCTOxXO7REGnurvJSIrV17VU8SUFlbmHTeKHK0ouomPk10QxRjUe6KuFXNW3skDs0aEpVDCnMyZth%2BIbewo71qBo70dgsf%2BjG3nBOTKVvQt0apwoBYSuzsA%3D%3D\"}]}\r\ncf-ray: a15e12716c740b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4702\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4702,"size_decoded":5410,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f97e14e9c6a467d8ccbda72601959376","sha1":"9c0f2780396c2e04ae1819568a903359f0fac8b2","sha256":"5574b27439eb0734e11416672a14b7100f31d9eb52bcc705274ddd465cf323b9","sha512":"997cd32b30bfa1f7c51882a2280a92bcf7c90fa88a7743e47ffe76836d9eb84380e6347709fef9a454f47f25fd375ed8150fd57edfcddd485639dd96fc44b97c","ssdeep":"96:kSTRlZEkcItccCtnKJzUGFri5Izj5MPKg97Ueo/BJfM48D2OPhq:kwlmdWc7toJzONUeo/u9q","tlshash":"6ba16f6d0ea4c48debd561b1c23c5d3a87ed4491f2284ccbbbaa44c3bc735e651d2c68","first_seen":"2026-04-04T16:22:39.230322Z","last_seen":"2026-07-04T20:31:34.089039Z","times_seen":7,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/turboslot-300x300.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.064Z","timestamp":1783167501064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/turboslot-300x300.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Mon, 19 Jan 2026 17:20:40 GMT\r\netag: \"6ce-648c0e8fdb057\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7AVK1K7t5vnpF77DtNc8V%2FkhpCT3Ctwcfg8kIbhlrMHOX%2BNMkFm4AsjjNDQCljAgYqm4trs2xkXjJHbcDp7ygTBOQT8ATucOLHZjCkE71im%2Bb6PG4Z6F5Nzo88eIUbbCQ%3D%3D\"}]}\r\ncf-ray: a15e1271ac7a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1742\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1742,"size_decoded":2451,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4a6d9749e7eabcc0e3f506df25fd58d9","sha1":"36d08ccaefc6dc35947b241c4a46361705ac5e28","sha256":"ca8c0b090a94094a43902053befff4849b6920ba540f5592473551e30aee497d","sha512":"3e7fed48b74dda5af628374c38cf00da431d7ca90f3ccb39bcb340547aa2639dd1b95d7939d7bc47b40b4393c9a2e256b51445a821376479d8da6985d2b47a5c","ssdeep":"","tlshash":"c331e602be687d62885be476836a3532fe483c12c6c9eac286c5bb7c409dc973608725","first_seen":"2026-04-04T16:22:39.289949Z","last_seen":"2026-07-04T20:31:34.099875Z","times_seen":7,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans%3A400%2C700%7CMontserrat%3A400%2C700%2C600%26subset%3Dall\u0026ver=1.0.0","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.773Z","timestamp":1783167500773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css?family=Open+Sans%3A400%2C700%7CMontserrat%3A400%2C700%2C600%26subset%3Dall\u0026ver=1.0.0 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 04 Jul 2026 12:18:20 GMT\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17039,"size_decoded":2506,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"2b26f70afed379ac109ad6ef48808298","sha1":"8b9636862812be2184396cc5290af2c7b9f44a4c","sha256":"e460a3b5fd6c06e1e8b5274e1da59454f630bd6fa6ae6f610d5e4df1b28d1305","sha512":"f2a5452c50ba17b0a28f5ea04ae7a0a720f1320990501d9ea365e792530041f0f0d9780354950e7c6f8dcd2a81150fb4581fb729e242633018ff85f093fb0819","ssdeep":"192:qRa7h5Osu7R47nfOeuQRD780ORulCAAN21/rqbnbqGIwV4Razq4CZZE2s6rqmnbK:+SwAfncjXqY4nU8qY4Z","tlshash":"82722091001ba80067431cd623ce7e35de0fa2657084c0766bfe5aaaeedad76637532d","first_seen":"2025-11-03T14:18:14.373506Z","last_seen":"2026-07-04T20:31:34.102305Z","times_seen":10,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/wipbet-300x300.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.065Z","timestamp":1783167501065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/wipbet-300x300.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Fri, 02 Jan 2026 19:21:07 GMT\r\netag: \"800-6476c9c7fe742\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2BXA7cdlO5lb9%2Bc2AUtk85%2BrBv%2FSoF%2FQFmcD129QuuakNm0ifJwXC1%2Bws0BSNg9xE5NsUP3jaNiWrs3bWXQ%2FNOUBJVqhGZBC8fZ0vmGZGvLUH%2FTwNjsBeMMxQzMFNzSe5A%3D%3D\"}]}\r\ncf-ray: a15e1271ac7b0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2048\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2048,"size_decoded":2767,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c6609fcd553229a739ef4605a85105cb","sha1":"b90efcaf76dd5d5c398b7ad22adc7b435e97bb63","sha256":"c098878537326c09a11f5340d76123df1b3d7c3a32a33bfd303a728d59b3c860","sha512":"e86b1d61de2f154414dd9369a4d4cb2a76eda7c9d418ea95c5b6459fe3814a25a547e91eb7f5db91b048070afa131cc7c389b044fb2077c1100fd3d955c5f0a9","ssdeep":"","tlshash":"2c413813ac933298f6d861323a880356f66c6f3dcddc658710ca6e185a26ad5d2b312a","first_seen":"2026-04-04T16:22:39.270335Z","last_seen":"2026-07-04T20:31:34.124653Z","times_seen":7,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/2020/10/logo.png","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.806Z","timestamp":1783167500806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/2020/10/logo.png HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Mon, 13 Oct 2025 11:07:41 GMT\r\netag: \"b78-6410846a49940\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XdPRckWcwKqgWN0Txrsug6tzfC%2FMc%2BZfc7DgI37X%2BM0zZyR%2FGAQjwJ%2BENiwIeTEeYBqMw9Kvdf9RYqUQhgOcRdCwS9QbjFkdRZz06wNKxa2mixtIqWjbcz8m1ka8%2FLujXw%3D%3D\"}]}\r\ncf-ray: a15e12700c690b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2936\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2936,"size_decoded":3651,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"958bbe39356a29617841db46c67f75f0","sha1":"46d29fb052cbd40062c9ed094bbd49734e4f7743","sha256":"c887e4e679fc11bc0122b34c3211836dbfc8988cd7a7cf69b83bdca25ccc262a","sha512":"c59b6687816dd284e90a0f3eddc6c6a70b5262a0a22ae8896ac6e20c6b8d0ce66929a9448f1e17d59f2b1f2ce3d5cec3826939f82cd61d10845ff7a042308e50","ssdeep":"","tlshash":"f8513b057b63c20edbe3da77f74290de19f168b0d0937861c1461077b9ae81e01021e6","first_seen":"2026-04-04T16:22:39.241669Z","last_seen":"2026-07-04T20:31:34.117882Z","times_seen":7,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.012Z","timestamp":1783167501012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bahisguven.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Jul 2026 18:06:16 GMT\r\nexpires: Sat, 03 Jul 2027 18:06:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 65525\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-07-13T07:18:08.804102Z","times_seen":536145,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":54,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/sanslisin-768x768.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.033Z","timestamp":1783167501033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/sanslisin-768x768.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Fri, 23 Jan 2026 05:23:11 GMT\r\netag: \"1aa6-649075a7384f9\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CdI5vJ3pA9Sp6QIHC6%2FSCn5OnqlhUoXx97U2ZC6FRXOrWmn1eJaeIy1gOo9tOGfTQUbnU%2BbdOgeIrQrWpLkSgtT8Ft6%2FIc8nUMabClJGXZC3VVfS4rUIiAEL3%2F70MfS4qQ%3D%3D\"}]}\r\ncf-ray: a15e12717c760b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6822\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6822,"size_decoded":7534,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b83ecf4be411be058a485bc32e22e07","sha1":"a2fd51b2f5aec45b2480aa29eef8d122334967f3","sha256":"1883edac2b6260baea2a916c5f3f8bb4b53d45ea9683aca355588821c2f8d5aa","sha512":"7718d144289c3fc701f98cd85a8c3993a52c31b385c592adf22bc2930ab170ee64fe2011dd2dfcffb26e841614b2525f66708d0190628d82509f99ec371dfa9e","ssdeep":"192:07qoooooojd36oooooo4ueLtKvmp+T1R5ot5/v0WgV:aqooooooJ36oooooo24e0Tr5ot5vLgV","tlshash":"1de15b303c86ff1fd66c8831f41bd24459437d98681098fec2a17d33fce6a32a098905","first_seen":"2026-04-04T16:22:39.288513Z","last_seen":"2026-07-04T20:31:34.104735Z","times_seen":7,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.010Z","timestamp":1783167501010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bahisguven.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Jul 2026 18:12:11 GMT\r\nexpires: Sat, 03 Jul 2027 18:12:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 65170\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48320,"size_decoded":49132,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-13T07:14:39.097492Z","times_seen":304965,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":100,"connect":31,"send":0,"wait":34,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.026Z","timestamp":1783167501026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.5 HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 13 Oct 2025 07:10:49 GMT\r\netag: \"4b33-64104f78ab040-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/javascript\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8I2ll2sxpy20xWafErrashdn7C5LQ2WtApFYLrDViQoNz8ea3ZKnIu7VSGY2vXBzTyRJJDA3eX%2B9ssDyUlsfVpsdl8AOlu10HxGkZal9qDvPiJA2gPVm7MOj%2BqZAFoE5oA%3D%3D\"}]}\r\ncf-ray: a15e12716c710b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5163\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19251,"size_decoded":5917,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-07-13T07:06:45.101622Z","times_seen":210616,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/huhubet-768x768.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.034Z","timestamp":1783167501034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/huhubet-768x768.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Tue, 16 Dec 2025 12:51:33 GMT\r\netag: \"1fd2-646112ff15f40\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OhQ4wQQugoSmTEIBKcUsur4KMWbe0MlfFbAJOuzSNoIJaXxgObpec7ni9Ci8WwsaSsFb2PD%2BKgX8ePGnhwZ%2BrYN%2BLRF2W22n3zLI3BfVRjlmHgGYsT%2BkF30s3k5zkQOYFw%3D%3D\"}]}\r\ncf-ray: a15e12717c770b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8146\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8146,"size_decoded":8858,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7537b8449cbf5abbf49d7a5fa2d4e975","sha1":"e3a21f07abf7a6669b12df75e846cad9db1750e6","sha256":"fd1ed1ea7151a67a7f7903244d5bd0ab5ebb1469284c32206da0aba72d0c0c8e","sha512":"f9cb28986c9bac806d98e7f7e150bae05cb9cf724f4d47736902ab307e3f961b19d36295de4e96af439bfa700bf8719cca488a2e5bb0ffa7d1a2da9bcb31969b","ssdeep":"192:GU4pZD7SvPUhJrmqHARXUQMc9SjxgSXkAjFkFEeg:uP2vPSrAeeUVBkueg","tlshash":"d7f107bbc8e4aba02518120e0e8de55056b6ae5f623cf33816c9d14f0f7b9079c6c5ec","first_seen":"2026-07-04T12:18:46.552216Z","last_seen":"2026-07-04T20:31:34.091063Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/turkbet-300x300.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.062Z","timestamp":1783167501062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/turkbet-300x300.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Mon, 19 Jan 2026 11:27:46 GMT\r\netag: \"688-648bbfaf8412f\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u1snyDE2mIBchDkFcGh40iiNfSSJDaGNNL9BmwtOHLDCAMmKbbM%2F%2Ba4mAA8yRp5XRk0OCsX6WNPaLDmmv%2Bayeo94OPW4FYuDJWpXC0GSIJyM5q43r%2FHrx3aMVb0eeojQMg%3D%3D\"}]}\r\ncf-ray: a15e1271ac790b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1672\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1672,"size_decoded":2383,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ba81d1f6e74e1934fc857d63b4139520","sha1":"dbeb30313bc4fbf2d31b0f8e3d0c1230e4e1906e","sha256":"e8ff8c113115fcbe8a1e02c1efb87c452ab6c0a6b29b2efee1d7cae2af2134b2","sha512":"49bd9c98b0ff7a501057e7666c9fefb00f97bb08f59f8460be06e46167ac230242b54b25624027f16364d744e44924cdf50d0687cc62cb5785e6ce50c399e115","ssdeep":"","tlshash":"ab31f8a375d30802ce7392312a37a454d41026e453b96b4b34fba60d982acbc6f303e1","first_seen":"2026-04-04T16:22:39.280664Z","last_seen":"2026-07-04T20:31:34.122186Z","times_seen":7,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/redwin-300x300.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.066Z","timestamp":1783167501066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/redwin-300x300.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Sun, 18 Jan 2026 21:07:50 GMT\r\netag: \"5fc-648aff797229a\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0UZ%2FuJ%2Fl6OVweyHcu%2Fw4rvfi6jqnRKcogmip%2BUuFFiLqvfNXQzVgcLwaNRZrfwTwEPEDXBvbLMOUoUjsfQ3XhKuYXdvsGCqGllfUvspKG15MWvLyqCBb3DZEDrr0Dp0yKA%3D%3D\"}]}\r\ncf-ray: a15e1271ac7c0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1532,"size_decoded":2243,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c06c5196d5ce39b03cbd772c5e5c065d","sha1":"8dc4deb0b5a70cb3da0c7a8a430ad05864b5f7b6","sha256":"76c52459890736c700b914e29bb4ba21c17ed856cc4c24d438750158537358a7","sha512":"b55efa1cc9bfa09bfa4ddee1e27b04b35b8f983a4992ed1cecb058ecd59db2123e6b3a1aeeb6400677680fc6616b5608c8db68dc597c401f9d149b399114d994","ssdeep":"","tlshash":"d531da2311bf004a4e3feaba5b4e9c37b6640423801d6a8265cecc52086e23b517f53e","first_seen":"2026-04-04T16:22:39.271739Z","last_seen":"2026-07-04T20:31:34.114879Z","times_seen":7,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/2020/10/favicon-50x50.png","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.258Z","timestamp":1783167501258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/2020/10/favicon-50x50.png HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Thu, 22 Jan 2026 08:22:44 GMT\r\netag: \"4dc-648f5beb6e254\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3DRafaTOco204mMwc83bix%2F76c8%2B%2BygA6ru4gX8QTz%2FRj9gHCLUeOskbndGymGSiVh8YVHBxQhmsRjRHqM%2FKuegqsWJgBfjxYOtgU8zT0uVRsrSfoKL2HPRkTMiklf8UCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a15e1272dc8a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1244,"size_decoded":1960,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a3f9705c5debf07eef2465f0ad2ee39d","sha1":"526a5c8c561777632df5f21b9bfe4a1b7d46deb4","sha256":"35aad60bceb47a1b326780d88ca48c172cffe1f1371cf704c18f5c58e3febb8d","sha512":"80c666dcad925d8c714ddef39d476ce65dc7adf3c5adeb71a28986bb5572bdcd71ceec7d9e2050a126a4164393ad5263e6ddf56b0a7f6a5ad2ffba72450bcbad","ssdeep":"","tlshash":"4721ea3d62c09a9f1e81bf20b6f0329715d5a8267e6057d72656336438609cc4495e69","first_seen":"2026-04-04T16:22:39.292594Z","last_seen":"2026-07-04T20:31:34.107084Z","times_seen":7,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-includes/css/dashicons.min.css?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.776Z","timestamp":1783167500776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css?ver=6.8.5 HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 26 Jan 2022 10:40:08 GMT\r\netag: \"e688-5d679d34d5200-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/css\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnibhqGw0L6kZ1hzWIYJVAfqHP406mqvRaLDRqt74Lo5f1KhGZimQV22y0TyZw8Sg3NWkBHk46Gwg7oR1zdobgV3EUuQnh2Dqk%2BEirn6IV%2BPFwGd9eku9KSJYySJpRAGEg%3D%3D\"}]}\r\ncf-ray: a15e126fdc5c0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35730\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59016,"size_decoded":36478,"mime_type":"text/css","magic":"ASCII text, with very long lines (58981)","md5":"d68d6bf519169d86e155bad0bed833f8","sha1":"27ba9c67d0e775fc4e6dd62011daf4c3902698fc","sha256":"c21e5a2b32c47bc5f9d9efc97bc0e29fd081946d1d3ebffc5621cfafb1d3960e","sha512":"fd0956d1a7165e61348fda53d859493a094d5a669aa0ba648be3381b02ed170efd776704af6965f1e31143f510172ee941d4f2fc32c4751d9b8763b66301486d","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5rJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+rJq","tlshash":"9c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2023-04-05T05:16:42Z","last_seen":"2026-07-13T07:00:22.510127Z","times_seen":132996,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-includes/css/dist/block-library/style.min.css?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.778Z","timestamp":1783167500778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.5 HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 13 Oct 2025 07:10:49 GMT\r\netag: \"1c679-64104f78ab040-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/css\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bZevRtqcrPQRkx6P4YJeiK4hEyVrB%2F2LJvtLlSPAkGUnDBDG1mYjesTN2hiIyA7wY3VAlTo8vrz1X%2BwMVMCDeL0kl1mFJ066V5NnIES3zaG8%2FnrqTUhU80GBas5cv1HONg%3D%3D\"}]}\r\ncf-ray: a15e126fdc5e0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15315\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116345,"size_decoded":16066,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-07-13T07:06:45.105166Z","times_seen":176707,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.782Z","timestamp":1783167500782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 13 Oct 2025 07:10:49 GMT\r\netag: \"3509-64104f78ab040-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/javascript\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9wdhW8iLRGuFf03btukk5KuwhZdaBRKSFlMBuW0UVC6BIxQeS6Iy7YOB3Nks5hNHJL60aa0vB%2FwPsgvBojDM%2FSNNHuOxeYJaON8d6mbcUEQCRxRRLQr2VcNF6JAEX61ctg%3D%3D\"}]}\r\ncf-ray: a15e126fec600b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4872\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":5626,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-13T07:17:37.005331Z","times_seen":885629,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/js/owl.carousel.min.js?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.792Z","timestamp":1783167500792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/themes/bahis/js/owl.carousel.min.js?ver=6.8.5 HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 23 Jun 2021 11:02:36 GMT\r\netag: \"9dd2-5c56cd815cb00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/javascript\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lc6YpghWkIJpx%2FtQrC2UD1%2BPxqg%2B1J5khUpTG%2ByY6SkgZ0ptCXOuG%2BcI6TP8%2BJrGjK%2FUV9Khh%2BVCTedOcLi7GpFfa1S6XHBuicKzCCcv8d87TNkCoHOXuvFNJVOWNCpw5w%3D%3D\"}]}\r\ncf-ray: a15e126ffc670b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10526\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40402,"size_decoded":11293,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32068), with CRLF line terminators","md5":"db4c9c39a3af9343842156df81f25d08","sha1":"36af2c0bc454462355584a535897ca5ec6371f3a","sha256":"e04e2b4e27ae9881b1e161954cc00ba16c8c3a0ce73a179824756353efd6c481","sha512":"c402feb4cc9c11a4d2d30c8abf9f4f316e4115c1ce8cdde6df4645a904b5a864eeed249d372cfd52ee0d9def6fe50734d87f4ff4501b477882ef4708d65f2a68","ssdeep":"768:MCcZ1I6+gyfJ78tKOGOrnepjMzZG+uluJe+KSzVc79ThcGP:1cZelJ78m2cw8","tlshash":"70038446b3302d2a8a9b91b0663f020bb13b241de415947d797d9ade6d79c4c213fbb8","first_seen":"2023-03-07T01:36:39Z","last_seen":"2026-07-13T03:52:47.999188Z","times_seen":1756,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/js/custom.js?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.793Z","timestamp":1783167500793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/themes/bahis/js/custom.js?ver=6.8.5 HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 23 Jun 2021 11:02:36 GMT\r\netag: \"3d85-5c56cd815cb00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/javascript\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yN5Itof2Ud9ajv47rXz70zEd5yuss4eAipdA5phlJvaLzfKEDu%2FUu4zzJuux3oJlCUfd692VB8G4xxK8pOpeMIuZWHhD9HPt8Scs21NNiESYkRq51tAcoFu9Wq%2FbTyDyCw%3D%3D\"}]}\r\ncf-ray: a15e126ffc680b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4124\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15749,"size_decoded":4878,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c743bd85743889c158829182542936f0","sha1":"c9dff19b097fdf713b561033529df3049c958d52","sha256":"329a2a8d4dd3658411b5c1b9312a8828f6f5a312e2b6c3feb626c742ce7392db","sha512":"4e5c1713bbf3945e85e5d09b42c0f08188cd52e4a2c69384443d207eebae54cc6b9fbb41326a7585bfa816cf5bffa260024417427325ea8a0c9d0117a3b8bfec","ssdeep":"192:FmdRpE0W98mNAXQJHM/8tsvolVfK35n71+HmJaTEi:eRm5em2WHntsglVtTEi","tlshash":"e46240c4b39e6a6e41ef7155553fe800ee7ee833860251b4f4fd10b4aaf4a092366d6c","first_seen":"2026-03-24T01:57:19.56699Z","last_seen":"2026-07-04T20:31:34.120949Z","times_seen":13,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/casinoslot-768x768.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.031Z","timestamp":1783167501031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/casinoslot-768x768.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Tue, 16 Dec 2025 12:52:42 GMT\r\netag: \"1ee4-64611340e3a80\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VzhiNroR44W9vUe2PrR2fhIuoHe5ROyHHla1kcpjSBCwjPOlsOi57SUfK0rVZKtaMglVRTroUWGaQ%2Fw4nIyHMC4FV1NbZBLR7CGitG5Q4dRSa8kgaVeVDbllSw%2FUpfvJXQ%3D%3D\"}]}\r\ncf-ray: a15e12717c750b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7908\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7908,"size_decoded":8616,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5c05e78c70b831711a97ffa60279f35c","sha1":"5f926a3da4d898e7a925266b913c7ad765988d3e","sha256":"f888316c7901fb64a376efa31c62bc80e7b835a328b20192b3abd6f4afe84a73","sha512":"af870afa21b307a0bdf18550c3288c437a912f6b82929ec0917b993b304d553914324004d662e5e3d0d205908b4fa9932901eead6ebb3ab9c32b065fd8947586","ssdeep":"192:sFsj22Uf8LmpbQde7vqvPq1xxwq/Kusm91eD0kO2tI:ygkf86G87vd1xOq/Krm9kDLNtI","tlshash":"48f1e379329e38be71390cfeaf1f2d4f15a08a3b7d9948874e325523a23518be175065","first_seen":"2026-04-04T16:22:39.25874Z","last_seen":"2026-07-04T20:31:34.10988Z","times_seen":7,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/css/owl.carousel.css?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.771Z","timestamp":1783167500771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/themes/bahis/css/owl.carousel.css?ver=6.8.5 HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 23 Jun 2021 11:02:36 GMT\r\netag: \"12de-5c56cd815cb00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/css\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2FjmL3W2Nfc1wrTiWArbNzbN%2BFZmjGwpUREYZcQ3mVshdV2iFlSGsv2D8weu2bxRXwIuKgZCUU9vbUbgXWeuNbPynS703nrDoN9UxmANEWanPcU6Fiy22gxaT0OR3LfZKw%3D%3D\"}]}\r\ncf-ray: a15e126fdc5a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1115\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4830,"size_decoded":1862,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d48cad87ce04970f9a2ed80f2ed2285d","sha1":"d2ec5b795a3f70ed6cd421554bf0ab3ab1b11cf0","sha256":"a8fafb3979cb206518537bbd02e5cdaa78a1808b6e58ab8e7cf7941d0b7b344e","sha512":"e6c9559e05e67b2ad5c1e638c17c210694750ffe12895fcf47026b08ba9ad544523e450d16852a15695a99ba5ef8adf10e47fa90c51e84007f143e3dfe452025","ssdeep":"48:2mePoJIfFfvhfOp64j1I7Z3hQJkCJxneVnYMCrXBVQ8eQcgCZ+FPyvfathPFgWEu:2VhwmIexMx+q+ATjFG1ovtcs","tlshash":"99a11eed1211114d54378bb41b9d9a1abe3d94a1ee12008cbaef6b1243dfe5c502ff6b","first_seen":"2023-04-08T01:03:05Z","last_seen":"2026-07-13T06:39:59.102776Z","times_seen":1061,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/css/font-awesome.min.css?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.560Z","timestamp":1783167500560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/themes/bahis/css/font-awesome.min.css?ver=6.8.5 HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 23 Jun 2021 11:02:36 GMT\r\netag: \"6b4e-5c56cd815cb00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/css\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R50gA2MWe0mEEUH%2BAZ1y7sflST%2BAdli%2B%2BmGEwWVaoVSWTwRO6MvVP3s1ZxnRrUbMI3V%2B72HYpjzvEMHXKFSOw%2FzoZtVqPpUwPXihhmMxum2LAuz%2FgVYDgd7E0X7PJVN0ng%3D%3D\"}]}\r\ncf-ray: a15e126e8c530b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6248\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27470,"size_decoded":7005,"mime_type":"text/css","magic":"ASCII text, with very long lines (27303), with CRLF line terminators","md5":"7c5c70efc6386e1f69e66154da8c5c8d","sha1":"624e4a106f0cf385ff4bd6a65c52cecd84f42ef9","sha256":"b4d6b22089928a2b989f6f596c10c26ffaa7b71fb20a4125fde64ab1d3b43cd5","sha512":"cf5649ac124f8380f03e242d3bb7c2798d10bf3f8a28a510a012e726ed8658b1825854ca9001f812bddf7e5ea7a5c32318205b7d40005536075577db7ab9371e","ssdeep":"384:Zi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8L:6lr+Klk3YlKfwYUf8l8yQ/2","tlshash":"75c23ff8e54c01d66731c48bff81b36862baf73dd5814d99f01f690c29d22a522c5bba","first_seen":"2023-04-05T19:16:00Z","last_seen":"2026-07-13T03:45:36.708129Z","times_seen":1215,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/css/magnific-popup.css?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.774Z","timestamp":1783167500774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/themes/bahis/css/magnific-popup.css?ver=6.8.5 HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 23 Jun 2021 11:02:36 GMT\r\netag: \"1fd6-5c56cd815cb00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/css\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nw8TPa3KyEuFU9cujFJoPvadfgwWvP6NH5x%2FqiGytgeOwiJdzjc1CTXiqODTBTZfTkcDdwxbz1UE%2FmC49KlLIrcrziH6YcOzB7xwqcPzfcju91hnG2Igq%2B6MOqLZ8BRfWg%3D%3D\"}]}\r\ncf-ray: a15e126fdc5b0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1952\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8150,"size_decoded":2701,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"40e95695671cf5d44c56882269950a42","sha1":"938fe691286794ca591aabd7261e08cebe43957e","sha256":"012f637ce543a16d7d270774cdbd69acef93ae0e3ddc53ed04fed93903a6336d","sha512":"cfde1fc82c0db66dd2e4d8d2413160c09e609dc0c8932603e151d67d33ed41e1be7bd6898ece067bf32a4590523a8138d7bcf23ec1dda13b94508ef4c9804c00","ssdeep":"96:0QM0MKt4yXV5nbtc58VDSwt+i02R4zpQBO6F1xoAq98Z/vtFXz/0FL9aDRA:NV4yXVLiGx+HzpE51xHq98Z/vnz/89a2","tlshash":"03f1ce66db613302d536dbb4e7938729e6120073d31344abbfd29845ebeda480261fd9","first_seen":"2023-04-21T09:07:13Z","last_seen":"2026-07-06T17:02:06.293464Z","times_seen":205,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/turkbet-768x768.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.784Z","timestamp":1783167500784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/turkbet-768x768.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Tue, 16 Dec 2025 12:52:32 GMT\r\netag: \"165e-646113375a400\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c4SDg0TXSdQWSN9EGAFhHtXsjX2uFVbPxTyuea9lFD9OczCamRB%2FxiTSTpma%2FDVT6WadZHp0a87nwi%2FLmDRGzQSaIyljsvCdb3li6MoDXGj7BsDUg%2B199puhf5mKP0NLfg%3D%3D\"}]}\r\ncf-ray: a15e126fec610b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5726\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5726,"size_decoded":6438,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dc2ae50c63fb3ce6e41f43a2babf04b7","sha1":"fb65d7818d94b45ed5149bda8091ad776e6e39f8","sha256":"c82c294c7550a8e9227e764b05c941a08e3d470241932b7a62d1dc75fcb7a12e","sha512":"7be6f0ed7e955d0578b1ec9d37fa61e96b0b5a6a582a3cf7f305b89913c38538d1558b2f8b1c24d22802d2ce63a4758d7eb1de7f66cda9a97c5c192a747253d1","ssdeep":"96:WmvWnCono/XxRpPcv4hHAQxacO37767zH6LGoQdRGoJL4G/kCvBl:tv+CoOxRpY4+QLOL763qGphUAzl","tlshash":"1cc19194343af6a15f06cc9efcc51b681bb6fbc4721443e5d6726303ae980b93de91a0","first_seen":"2026-04-04T16:22:39.254752Z","last_seen":"2026-07-04T20:31:34.116782Z","times_seen":7,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/js/responsiveslides.min.js?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.787Z","timestamp":1783167500787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/themes/bahis/js/responsiveslides.min.js?ver=6.8.5 HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 23 Jun 2021 11:02:36 GMT\r\netag: \"2fe6-5c56cd815cb00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/javascript\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2BAiS7fcMV0%2FqVPNVOV%2FBCk%2BO3AeQ1JMdFRGRKlhsmDkyY%2FcQOuuEHVRIqDZEuuFMwEGisE5w8p855TcONhokO%2BStruxBz6iw0LFkwakauVY2RI0CItxtd5I%2FwvcFCuTNA%3D%3D\"}]}\r\ncf-ray: a15e126fec630b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3195\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12262,"size_decoded":3959,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"6dcac2ee0f3faa3dfae4b45ae491e8fb","sha1":"6e3305d938932653ab30649db9f6264826735a3a","sha256":"bc291b0ec180b9287fddb86a707ef6afbb18473f440819eb56307034270d711c","sha512":"dbf06efce7618222ac71519e0b9dbe73d847cc6e12e475ce9f777c307b484822c8b3628105f93ac1df344b2b29d1202411943b68e3c7ce966b2d1667b2bb1dd1","ssdeep":"192:/q32I6F6tnAN2y9NNJnkIfGR2mK5xeMphiAFiwi+v4hgKtJgzwWwORT4Qw0Alil:/rFMnK91GRPSxXBF4+vw/JuRTC0Alo","tlshash":"0042fc09751525b90c3bb33aab0ab50def6551339222d5553cef07881fb069882a6fff","first_seen":"2026-03-24T01:57:19.563243Z","last_seen":"2026-07-04T20:31:34.111356Z","times_seen":13,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/js/jquery.magnific-popup.min.js?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.788Z","timestamp":1783167500788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/themes/bahis/js/jquery.magnific-popup.min.js?ver=6.8.5 HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 23 Jun 2021 11:02:36 GMT\r\netag: \"51d6-5c56cd815cb00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/javascript\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sy6WoJ8e9BEfvVCFfJObhOukPJhbVy7Z1dedHN0FTDVeQosR6DZe3By1Wwg9QujoR4dsMXHWYe4ABOLcafaZGJXlzrg6roaaIhK3F1reHAPSl7xCTdYmUqiA7zQKpom3Vw%3D%3D\"}]}\r\ncf-ray: a15e126fec640b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7597\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20950,"size_decoded":8347,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20818), with CRLF line terminators","md5":"6a0d19da1bbca376f2484e4d2757993a","sha1":"755c2470daaeae7290969bd02d343bb267683c66","sha256":"29649dd5311ae06eb0639f2655f35be5da744bf41556d1a1c32d326994d77869","sha512":"1e372471a0825aaab93e212c11ba5976327ad300105f0a034f8294311c826c42e7843737c2638ce740d8a9afba2ade25443555783d415fa8a92928971e9ba948","ssdeep":"384:v4mrxoiMoB8uxsARrbXEBwCrSQX6GSnL/LuCcQjy2GuPR592rt+7U:gXLm+Hx6GSnLbci0uPB77U","tlshash":"32920868f1a3b11787eb75b8696f200d3b72a512c90bc011725a94d87dfde899127f3c","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-07-08T01:00:11.505487Z","times_seen":444,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/js/imagesloaded.js?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.789Z","timestamp":1783167500789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/themes/bahis/js/imagesloaded.js?ver=6.8.5 HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 23 Jun 2021 11:02:36 GMT\r\netag: \"6b8e-5c56cd815cb00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/javascript\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YJU%2FQKIvplWuaqLY6ZyoNv3NGQlVdsI3Lu9cy95u33xNwkezbXNXsBo%2FRseKah9ln7O6ehxC8UsotnXeH84mdzE8%2BcmGI30%2BOWjBU36%2BK5LBf5vyEd7nvWMd5B3pz%2FHW8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a15e126fec650b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6850\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27534,"size_decoded":7612,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"92742cca098dedbb9e365a16a7f538d7","sha1":"a63813de99cb0d1aee18c38f73aeef493f4c0dab","sha256":"f1f82c2db13fa9b0fe2c53cf02c500244ff0fe7b33f42d8c5c7e4c5530f3728f","sha512":"350c92add22c5c3af29bcc65923ba4af6a9bc1845d373e181e2af67c30bdc412300932cc77cb18f0e30af88a7ecc2cd0bd51f70876887c654fa093e135e8abe7","ssdeep":"384:cpwaJFkwLHeKsKVqzbQx9L+JWdKZjKGfHhs0DreaIPmaYG5RB1MF2gKrZbD:cpwaJF+KseeUx9L+8d+Xsgimk502gs","tlshash":"13c230c67f8b217744b5f36b773a2249e238c1a75214a244b98dcee02f74858817deed","first_seen":"2023-03-11T10:15:06Z","last_seen":"2026-07-04T20:31:34.098083Z","times_seen":23,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.019Z","timestamp":1783167501019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bahisguven.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 28 Jun 2026 10:10:37 GMT\r\nexpires: Mon, 28 Jun 2027 10:10:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 526064\r\nlast-modified: Mon, 15 Sep 2025 16:30:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":35156,"size_decoded":35969,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35156, version 1.0","md5":"062c1f2aaf2d4de07ad2a2f21c17ffc0","sha1":"3fd1f07343bd33a53cd374f7f107dbdf9effae03","sha256":"d5bab8e28732fe3d10dcef4f77b9c248605bbb2a87d289a2539251ceafab536a","sha512":"7ab522d8bc41128be5a15f2cb91f851f6dc5e437afbb90e6191bbe63d9b94a35911f04701fb2b291362b2ae0f0cc639dec2d15e53928afc5769590a2937e81cf","ssdeep":"768:is48okTArkNSgZJAf5jkRcaUNt8wrNPCbJktQV+n+NUB/wo8IEH:5hNTtNSgZJMjkRBUMwrNPC9NV+n+o81H","tlshash":"22f2e172c3787192ae0985760d60cec8986bb2098f7658b0143fdd38ee45345a3f6e6c","first_seen":"2025-05-29T19:30:52.507782Z","last_seen":"2026-07-13T05:58:23.91363Z","times_seen":21302,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":120,"dns":0,"connect":0,"send":0,"wait":41,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/js/masonry.js?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.791Z","timestamp":1783167500791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/themes/bahis/js/masonry.js?ver=6.8.5 HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 23 Jun 2021 11:02:36 GMT\r\netag: \"62aa-5c56cd815cb00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/javascript\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vs%2Fwm82BwZCjcHm%2FVjlpCJ%2F%2FQ8HpFy6wpDD0VDxBee4iXO15MixRdvv5Kb1KncgLtWOK0yJuIpWfXLSx8L%2FJ4arDlJzTfo17yEEXSNZFHXmYme25dcV2zy%2FwhTGMz5WSew%3D%3D\"}]}\r\ncf-ray: a15e126ffc660b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7634\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25258,"size_decoded":8396,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25114), with CRLF line terminators","md5":"99d6be6f56fe8d681d7a629173a98663","sha1":"7a2e2e50640dfd92a352143c84ab1df2b4c374b2","sha256":"8732adc8bd0c629fef78a6e39a2afa14bd4de3d0b7768699388e55a4e6500f20","sha512":"4614dbde1cd1d86a72b98692971a1f045ef01cb1ba2bfc77b6b9228a6d8ebfb80f12e1deea9ca5578e62c4398fa81adfa3fec147ca9da0f7ffea8f47be75d859","ssdeep":"384:nDeqAVuvMtz0BFoeCreiMIz6lMyevWXPp6h6E5bPgfXxN1nAvPo1kSBo0:DX+z0BF+frvghzgbPyRnUPIz","tlshash":"e0b2c64ab700b4309247f1a6a5af010f733ba5ade90994fcb285d8fa6db584c1137f79","first_seen":"2023-03-07T12:02:21Z","last_seen":"2026-07-04T20:31:34.108679Z","times_seen":372,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.013Z","timestamp":1783167501013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bahisguven.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 70532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Jun 2026 07:14:37 GMT\r\nexpires: Wed, 30 Jun 2027 07:14:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 363824\r\nlast-modified: Thu, 04 Sep 2025 17:10:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":70532,"size_decoded":71345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 70532, version 1.0","md5":"a3538ea24dbf115d688964fc374db38c","sha1":"d5ff95b327b6cb2371a0f0cfff9092d2f7f6f58f","sha256":"545f27e4a3f64bafcffd2912b4d9e4d8b89fb7a87f5d257fdb4eae3c0eb9e224","sha512":"cd0d910665c070475cbe4b4e0830be5b463d3ff2537ca174e875ceb610f0f0cc627ff33dbbc95fa3e308e8cee0d0fd697e85e1244aa6023ee3113b3d10815fbe","ssdeep":"1536:1+9A/N3bmPFNtCqzOzD9khgUkon9FoooVdjlV+It4UEct:1+oBINnCzXUv/obdjlVfyM","tlshash":"5d6312976c22c87f804a02f99ebee1b487733021192a1b1370aff35654d46684afef70","first_seen":"2025-09-05T03:00:03.770574Z","last_seen":"2026-07-13T07:18:18.766163Z","times_seen":12185,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":28,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/huhubet-300x300.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.074Z","timestamp":1783167501074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/huhubet-300x300.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Mon, 19 Jan 2026 15:29:56 GMT\r\netag: \"904-648bf5d00adc4\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=59aB8wQtiffKhCgfL5GmpnKOv8z4hojrKJ7U2WPHtHxss37JR9CjXUtwm%2B4RP7VR0aXbHwsUo8RAA%2B8isseiQum7ieyCE%2FN6YD21k3N3PPGXAAJmoPQUTxWBY2CmV5x%2BEA%3D%3D\"}]}\r\ncf-ray: a15e1271bc810b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2308\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2308,"size_decoded":3019,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"740c26dc3669d73744fd376b26bb6c5b","sha1":"56d1586efd8ac445a8fb05911cf70807b5fa5ee2","sha256":"a6468d4d3d14e297d76433acd66547fdd1681d586056e894472797053f2e54d2","sha512":"e41b11831903898a04a6210a39ea6b9c009234a1e21c42285ce1e59a27ca70a71e7aba300849ddcf19ee62dbb9833e7c54c06f1c63456702084227a5e00de29b","ssdeep":"","tlshash":"10411b0632443de0eb40f63381765095ce6540986aca2ff4c97d7d5d52cfa05a3646ed","first_seen":"2026-04-04T16:22:39.274273Z","last_seen":"2026-07-04T20:31:34.118437Z","times_seen":7,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/baymavi-300x300.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.076Z","timestamp":1783167501076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/baymavi-300x300.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Gqr2fWKAfrKxitwqt2cyfpL7t5bZLTAzbfpxJxRhRyASiryemOXYmUsIcrzGF3I8BeVhRJwwih7yMiD8%2F53lSn4nZJkCWLjOpjZFEfOlnl1Lh10AVpl8HEGn3rkbeMgiA%3D%3D\"}]}\r\ncf-ray: a15e1271bc830b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":785,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-07-13T07:18:16.976088Z","times_seen":106430,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/style.css?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.777Z","timestamp":1783167500777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/themes/bahis/style.css?ver=6.8.5 HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 08 Dec 2025 07:14:57 GMT\r\netag: \"c7a6-6456b8d6fde40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/css\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jDs21Hy1lVvlIXfleEmZqIqvPR8MOS%2B7N%2FgLkpi9%2BvkRvzO9znXmqz4SeA%2FMFjKD3gq%2FcD9EZieHt%2FUUxNY6B1Ja7J0csb1xxLm%2FCR4rOD2oeKEGz3TPNVkXYlenAqJKQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a15e126fdc5d0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51110,"size_decoded":11502,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"c3b878e31ccbea9d45e4dbc39b181354","sha1":"28761b423ee4fc103990d558830c1e9b7ae9654a","sha256":"efa702851e58cabb554f03446561d3689047281b35491749cbdad05f4145fa20","sha512":"1751c75d7311741a0b9c881ace1f7bf58c9d292d7fc8b5234a4f94c172187c2815620c303699ac3d8860b6335e24dfdf098bff0180a21c6b8893d65d28a0c18f","ssdeep":"1536:ALpgYbYciTt4svkJHn8RetgVCGSkxp9vhZSitNbYQDu4:ASOYciTt4svk5n8JCGnxp9vhZSitNbY6","tlshash":"9a3374a72a152c44a12fb09dafdaeb91671f9183ae0f8ddaf491752cc3891d80173f4d","first_seen":"2026-03-24T01:57:19.538561Z","last_seen":"2026-07-04T20:31:34.097371Z","times_seen":13,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.020Z","timestamp":1783167501020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WdhyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bahisguven.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 70532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Jun 2026 07:14:37 GMT\r\nexpires: Wed, 30 Jun 2027 07:14:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 363824\r\nlast-modified: Thu, 04 Sep 2025 17:10:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":70532,"size_decoded":71345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 70532, version 1.0","md5":"a3538ea24dbf115d688964fc374db38c","sha1":"d5ff95b327b6cb2371a0f0cfff9092d2f7f6f58f","sha256":"545f27e4a3f64bafcffd2912b4d9e4d8b89fb7a87f5d257fdb4eae3c0eb9e224","sha512":"cd0d910665c070475cbe4b4e0830be5b463d3ff2537ca174e875ceb610f0f0cc627ff33dbbc95fa3e308e8cee0d0fd697e85e1244aa6023ee3113b3d10815fbe","ssdeep":"1536:1+9A/N3bmPFNtCqzOzD9khgUkon9FoooVdjlV+It4UEct:1+oBINnCzXUv/obdjlVfyM","tlshash":"5d6312976c22c87f804a02f99ebee1b487733021192a1b1370aff35654d46684afef70","first_seen":"2025-09-05T03:00:03.770574Z","last_seen":"2026-07-13T07:18:18.766163Z","times_seen":12185,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":120,"dns":0,"connect":0,"send":0,"wait":19,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/slotbar-300x300.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.068Z","timestamp":1783167501068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/slotbar-300x300.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Mon, 19 Jan 2026 17:20:39 GMT\r\netag: \"f5e-648c0e8f288e2\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlXiRUw6o9eJAH88yGtOc29kX8mSJiiZ7zzJekF035S3Lr9YxDGRfn3SCPHe0xLsVXdaPHmrPocqMPTWVcpiPzVekX0MUiS6V1ky8VQrpPTgqdVkf%2B7HregveNFe4z2N6g%3D%3D\"}]}\r\ncf-ray: a15e1271ac7d0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3934\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3934,"size_decoded":4639,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"28bcf04499ff90ee65f7c5364573178e","sha1":"61e390549f5fe45dd7bbbaabdd86e1e9002f7275","sha256":"3fe92bcec33b123afd106df5740c29eb701a4cd32fc515a6f4f3ed82f7b9147e","sha512":"38d76887bf2c5a1308afec725abf195d39ae6d078dff6f7c0dd26cd9fc1df8157e58bc88e3e1035b03aeabc304b1efb401e1d1ccb97b58d3c89aed88ade7c6f9","ssdeep":"","tlshash":"b8816ca255c7810c9f7f309eb8d540e7ba91cc5e167a7aa2e1fd0c18456304c08f8ec9","first_seen":"2026-04-04T16:22:39.273023Z","last_seen":"2026-07-04T20:31:34.105995Z","times_seen":7,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/casinoslot-300x300.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.070Z","timestamp":1783167501070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/casinoslot-300x300.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Thu, 05 Feb 2026 00:32:17 GMT\r\netag: \"8a2-64a08ce09d9bd\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ljZSpv6BLT0%2BaQ4Ty0HSAKRNDizixoN6GIEV6ND0kmxg68fx5MwbhwNafg%2B2Sb5yq2k3psZjrte0b%2BhNFpHN0JNijMl0iD56%2FP5BVdEyUq22MMnhtSlTMCISC4HwaJk%2Fjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a15e1271bc7f0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2210\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2210,"size_decoded":2923,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8325f4c8253e978823ef857e239df59b","sha1":"e834fde232f4320c096fea17f57ae8db98518a6b","sha256":"12796b8316454ca66fafe7d53a6adff2eb58863e37d711ed0aca5899fb8351be","sha512":"76639377121d48fb6d4e6bcd4c23d4922dde235cf7df2b7609b165e2c6ca42c682ced1fe86732e08229b0e17f63afe9d55794bba19468ace68f3b1cb261d899d","ssdeep":"","tlshash":"08410916e2832a10ce2ac9a41f579421be0b1c4acfce357f3495ea1fae803b54912675","first_seen":"2026-04-04T16:22:39.28187Z","last_seen":"2026-07-04T20:31:34.100539Z","times_seen":7,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/turboslot-768x768.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.807Z","timestamp":1783167500807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/turboslot-768x768.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Tue, 16 Dec 2025 12:50:08 GMT\r\netag: \"1b7e-646112ae06000\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ip8SDCXd7F15DOONzGliUMwiv2yC3bDhynBvgGv%2Bcjko0R2uIEZKsA69AjNySnFJc3K%2FFlwdGspaW4mOUU3QqMQS7%2BKWsTo3nAQKYwWVBaGHqrRCc19FV7fIBwO5ukUF7g%3D%3D\"}]}\r\ncf-ray: a15e12700c6a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7038\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7038,"size_decoded":7748,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dc8b1411ff4623d431a0faab22ba831d","sha1":"1032abf367fa19b401c08195f2a2a7bc9defce4c","sha256":"e3500b349451bf5788458c4d6e0def9af1633392524504ec11557f3d285cf135","sha512":"8785687da22ec53627b60562399bb60ebe69c15a9e4c0a6a9f0453d69989f1cb35222f21537b25bc5e9bb37b32edbfc6a0b36b055a61c9124039f7b823425917","ssdeep":"192:cCg2xlJUCj3Oizrg5GLTfEF4FiYzS0jGcricfU1Qem4YsKAFzW2in:nlJjTO55ygaiYluTOsKUzk","tlshash":"e7e19fecbfe49c41fc760d6cfeb7629250798184ce409926616e2d7b02fd7ca5b7a810","first_seen":"2026-04-04T16:22:39.285402Z","last_seen":"2026-07-04T20:31:34.094367Z","times_seen":7,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/2020/10/favicon-300x300.png","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.256Z","timestamp":1783167501256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/2020/10/favicon-300x300.png HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ltCO10wgZP%2BL09JiuCnUI149TP8tUO6XE%2B7IC4dB2aKilZOXmfjF4UsDoZH8U2%2BwbIlbyE3IrrsU3mOMICNqKNa5y%2BvVAtDnBEoCrxhcWQDdaoZ6DBHCWRKEcxCDWlKztw%3D%3D\"}]}\r\ncf-ray: a15e1272dc890b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":794,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-07-13T07:18:16.976088Z","times_seen":106430,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-04T12:18:19.895Z","timestamp":1783167499895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlink: \u003chttps://bahisguven.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://bahisguven.com/wp-json/wp/v2/pages/25\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://bahisguven.com/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BLlbieZxQr4z4vataHy72yWeCabffNE5hIVzItYrP5ItZxRxDhfttsAErUwrpGvV7H93lJby1N9DZ8m2aBLpjQsBa%2FBBrRgNuAxuk4tM9xS7yaML9g0JyUgfqH%2B0KRmKSQ%3D%3D\"}]}\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a15e126a7c390b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Redux Framework:4.5.10","description":"Redux Framework is a modular PHP library that allows developers to create customisable settings panels and controls for WordPress projects, providing a consistent user interface for managing options and settings.","website":"https://redux.io","common_platform_enumeration":"","icon":"Redux Framework.svg","categories":["WordPress plugins"]},{"name":"Yoast SEO:27.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"imagesLoaded:6.8.5","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Magnific Popup:6.8.5","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"WordPress:6.8.5","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":47246,"size_decoded":10962,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856), with CRLF, LF line terminators","md5":"8f8401d8af72cbaa9006ce75eb798c36","sha1":"41f45c317af9950ea248c20e2bb443691b214ab4","sha256":"25e2c523e6a4d1789e557c636086851c4a4a33ae78e4e3ffd82440bd94c60f6d","sha512":"1547b7d64931661bfd7e8c21f2ea1dae6bbbd636a2c853bb8bea0df4b54e6f47575bb5411e4e81a863494185296e76524af45e1b0f281f3cb14fa64b0e054173","ssdeep":"768:fRgr0BvzbLhDY6wSSrz/e3NWZdapz+MbYbCvRuZMh4KiQV7tjkvHePgIi12uyOo2:f7SapCMb8LHePgIi12uyOo2","tlshash":"b82361737049141b2bdec7da81237f48d197f43eca16ca90b6f761cc9291ebb1263629","first_seen":"2026-07-04T12:18:46.574382Z","last_seen":"2026-07-04T12:18:46.574382Z","times_seen":1,"resource_available":true,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":4,"connect":17,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/css/bootstrap.min.css?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.557Z","timestamp":1783167500557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/themes/bahis/css/bootstrap.min.css?ver=6.8.5 HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 23 Jun 2021 11:02:36 GMT\r\netag: \"1ab9c-5c56cd815cb00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/css\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JALXgReWCsNNVjvmbnnejg5Q1cbw4Cyi36ggEaQ%2FFVnJFjjmgj5B7%2FLn8oPN236UtruTs1BdD40ydmF07kZQVUoeyCQBjsU4wRbN8tIANNZMdiHHZaVp1uZ6sr%2BwayPZYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a15e126e7c520b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18261\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109468,"size_decoded":19012,"mime_type":"text/css","magic":"ASCII text, with very long lines (65168), with CRLF line terminators","md5":"b330e4cea27a25a345564a1959f45e74","sha1":"26b7f9faa6df0aa7353ffd9fec1aea39a8d4e7b9","sha256":"94e444e2edff0c79757cb586c766bf3674e7ac94a029b5bb1136c58182fd6b84","sha512":"e84be728fa2acbf78a1ea418c29b9e56c9c32e4ca2dfb98ebcbc6a7e30d1fa6d33371233aade41785b8d0e03e77df687b68cd10a43e09bccee01b46a4e016106","ssdeep":"768:QGxwJkB9UVt1ljW1BFcN2edkRZoFbZb1gxN86GI0bZrn0VA4jmQYaO:Bwm481BFcNIRmZgfmVn0zje","tlshash":"f2b3d7a0f11031ea7223c65a71d0ed873319a152e56b4fb7f26b25d88f895ca0773f16","first_seen":"2026-03-24T01:57:19.483594Z","last_seen":"2026-07-04T20:31:34.10807Z","times_seen":13,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.017Z","timestamp":1783167501017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bahisguven.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Jul 2026 18:12:11 GMT\r\nexpires: Sat, 03 Jul 2027 18:12:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 65170\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48320,"size_decoded":49132,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-13T07:14:39.097492Z","times_seen":304965,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":121,"dns":0,"connect":0,"send":0,"wait":50,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/fonts/fontawesome-webfont.woff2?v=4.5.0","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.016Z","timestamp":1783167501016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/themes/bahis/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/wp-content/themes/bahis/css/font-awesome.min.css?ver=6.8.5\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 23 Jun 2021 11:02:38 GMT\r\netag: \"10440-5c56cd8344f80\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: font/woff2\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rnGTIIUgPYnnjzkEd7jUJdMkQ9ivrwUl5wasVe6A8gVP53%2FCVUS7KCT7A6cTghXC2OV38094CgcFJplAR08V5Xj9nlnaDSug30Ac0XafOlJJREvfPntu8MGFmule9yeExw%3D%3D\"}]}\r\ncf-ray: a15e12715c700b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 66624\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66624,"size_decoded":67321,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 66624, version 4.262","md5":"db812d8a70a4e88e888744c1c9a27e89","sha1":"638c652d623280a58144f93e7b552c66d1667a11","sha256":"ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995","sha512":"17222f02957b3335849e3fe277b17c21c4aaf0c76cd3da01a4ca39c035629695d29645913865b78e097066492f9cee5618af5159560363d2723bed7c3b9cf2a8","ssdeep":"1536:P7P0ehdxE792JHJ2qrz+MoCpeUtsG9eDeh9Zw+ZyqJ:PPlYw1re8Lsqh7MqJ","tlshash":"ae5302303406ab26ecdf0e8776b888f2b4da91d37b5f22c753aa84115dc91d5d94ca3e","first_seen":"2023-04-05T13:28:44Z","last_seen":"2026-07-13T07:17:57.106537Z","times_seen":32799,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/betasus-300x300.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.069Z","timestamp":1783167501069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/betasus-300x300.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=paugEEhXVhaf%2BYC3wCgGXx%2F7GAp3ZfkRzf4UiH2hNNriifPClXOlF2Cb7bmwaY6LrSjOw2kVTdkrZGBqlNOEy0Hd0I7UKpgNpg9CJL2TLU8Acql%2BtAJQwvV7pAE5xb2xkg%3D%3D\"}]}\r\ncf-ray: a15e1271ac7e0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":789,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-07-13T07:18:16.976088Z","times_seen":106430,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/bahsegel-300x300.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.077Z","timestamp":1783167501077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/bahsegel-300x300.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ndfyPW0CtuUqNSyi88ua3NhdpLLYIVy71h4ifOgnq5za0C4twCfVrRUkDOpDb11%2BwqbMOUHUhKymDUYgb6rBqF%2FWGdIQbXVJNhUddZ%2Bvy7g0UFpN%2BNxgcs2MakIMskvbPQ%3D%3D\"}]}\r\ncf-ray: a15e1271bc840b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":791,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-07-13T07:18:16.976088Z","times_seen":106430,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/themes/bahis/js/bootstrap.min.js?ver=6.8.5","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.786Z","timestamp":1783167500786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/themes/bahis/js/bootstrap.min.js?ver=6.8.5 HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Wed, 23 Jun 2021 11:02:36 GMT\r\netag: \"8fa0-5c56cd815cb00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/javascript\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TQOEuoIfAeXLOlnORYh3sUg73GNqVj%2FNlzQFwJ1GcKwyETp0KHyxa1lkXCu7GabX8vvPhOKn1k%2FGAXkhnOmP36JuWE6noBS72j1PBe%2BuNnL0WEWhrK6cn%2FkjbI5VdLR0Kg%3D%3D\"}]}\r\ncf-ray: a15e126fec620b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9646\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36768,"size_decoded":10404,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32027), with CRLF line terminators","md5":"78476b6f9ad01cecf085ef925cd671a2","sha1":"57ceee2c841f35dc0652dcfa88ce55cccdd72054","sha256":"5dc852fbb9a952da8184604356e226848cb0924ba8e654c6eeb478f67446dccf","sha512":"37b04d0d15bf074f00d78efbcbb62010c66d8b006f5ae86290eacabb88a74313f37f09459cc35949a5b25c00c6063e171df38196298500f0af9fcfa64521f5c8","ssdeep":"768:po2wPPImkq6IPaqPZXN/SmffVPKugfsD4joOiA6/l:x0V1DuiA6d","tlshash":"c7f2750ab13131a107efb1a1511b0a0e7235aa3de546817c78b9d9f22db9c48727bf7d","first_seen":"2026-03-24T01:57:19.498489Z","last_seen":"2026-07-04T20:31:34.120273Z","times_seen":13,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.015Z","timestamp":1783167501015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bahisguven.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Jul 2026 18:06:16 GMT\r\nexpires: Sat, 03 Jul 2027 18:06:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 65525\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-07-13T07:18:08.804102Z","times_seen":536145,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":121,"dns":0,"connect":0,"send":0,"wait":47,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/wipbet-768x768.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:20.808Z","timestamp":1783167500808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/wipbet-768x768.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept\r\nlast-modified: Tue, 16 Dec 2025 12:50:08 GMT\r\netag: \"16c4-646112ae06000\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sat, 04 Jul 2026 12:18:20 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lIoWoV%2FHWQcncWr%2Bg13NUdoj7BeayaZrUtisrajpSpLpGhhAiL9RvJAe4If%2BCcVPw5DOSbqumiwEPOaAo2EEiEscDwSLCWa3pGFZNh38NKQR413WNkQeSZyS3%2BsN%2BJ%2FlGA%3D%3D\"}]}\r\ncf-ray: a15e12700c6b0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5828\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5828,"size_decoded":6544,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ba7e60df8c45baff2b34a7892836d523","sha1":"d8a6eccfc30134119c417c0fb493a2053a03f58d","sha256":"b4b198c738c3a279f90acb7a16d94c0d88a202012402c1627eb206880142b0ac","sha512":"ff929979cc11454e37f39e2ba3f8306b910128a16c7c9b150ffb7648e10d8446355af1599f0c3be9b87b9998d6a8cdc645999ff898a38eb9d0b4ed6dac3f091c","ssdeep":"96:ecT2gSPze/jlFTrpp/VxS9an/EGbZJ1lUlBwSinltFOx/Ugau93o9rz/za:DT2fPa/jXpbxS94sGP1WFinzFOx/Ug9Z","tlshash":"47c1a53c034e985e6ed2d2965466e8ac706943f2cd7459010adc31a0abff2556fbc7bc","first_seen":"2026-04-04T16:22:39.244068Z","last_seen":"2026-07-04T20:31:34.11255Z","times_seen":7,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahisguven.com/wp-content/uploads/sanslisin-300x300.jpg","fqdn":"bahisguven.com","domain":"bahisguven.com","tld":"com"},"ip":{"addr":"104.21.46.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahisguven.com/","date":"2026-07-04T12:18:21.071Z","timestamp":1783167501071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahisguven.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 08:18:33 GMT","end":"Wed, 23 Sep 2026 08:18:32 GMT"},"fingerprint":{"sha1":"45:A6:23:B6:E8:87:4B:A3:1B:E6:C9:7C:33:F1:4A:AA:80:61:D6:9F","sha256":"F1:BA:FB:BC:77:D5:AC:C6:78:71:B4:0A:82:4B:53:19:9E:4F:70:12:3E:4A:F9:1F:A9:4B:6A:A8:5D:7A:EA:A2"}}},"request":{"raw":"GET /wp-content/uploads/sanslisin-300x300.jpg HTTP/1.1\r\nHost: bahisguven.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bahisguven.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Sat, 04 Jul 2026 12:18:21 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mGQqYBeeKgRNKYkfTGjwVnWLCwoDPavdCjvRXFAJd6R5tf36EuT0egatQPCRWlKce1plh3dwzteKqmWoMxOqMDb%2Byjmrd1tJM3%2FAVUFCv5XlZzfNzHrZTVYrUHoPOVYDWg%3D%3D\"}]}\r\ncf-ray: a15e1271bc800b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":787,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-07-13T07:18:16.976088Z","times_seen":106430,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"bahisguven.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}