{"report_id":"1ca98eaf-1fca-4518-b440-fad09ae8496d","version":6,"status":"done","tags":[],"date":"2026-03-23T14:35:07Z","url":{"schema":"http","addr":"m.galalbet1060.com","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"172.67.157.37","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"m.galalbet1060.com/tr/","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"title":"Galabet Güvenilir Casino\u0026Bahis Sitesi","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-17T09:26:49.315004Z","times_seen":1038836,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"m.galalbet1060.com","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"172.67.157.37","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-27T14:35:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"va.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-03-23T08:35:22.773834Z","alert_count":0,"request_count":5,"received_data":8237,"sent_data":2630,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.segment.com","ip":{"addr":"3.164.239.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1998-07-06","domain_rank":9348,"first_seen":"2014-04-11T12:30:48Z","last_seen":"2026-03-18T16:50:27.809257Z","alert_count":0,"request_count":2,"received_data":111166,"sent_data":964,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.201.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1098,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rgs-wss.galabet1060.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2024-04-26","domain_rank":0,"first_seen":"2026-03-23T12:48:29.037257Z","last_seen":"2026-03-23T12:48:29.037257Z","alert_count":0,"request_count":1,"received_data":828,"sent_data":760,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.recaptcha.net","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-01-06","domain_rank":7582,"first_seen":"2012-07-11T14:32:37Z","last_seen":"2026-03-23T11:06:08.346109Z","alert_count":0,"request_count":3,"received_data":99794,"sent_data":1886,"comment":"","tags":null,"fingerprints":null},{"fqdn":"go-cms.galabet1060.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2024-04-26","domain_rank":0,"first_seen":"2026-03-23T12:48:29.018241Z","last_seen":"2026-03-23T12:48:29.018241Z","alert_count":0,"request_count":11,"received_data":60176,"sent_data":6128,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"cdn.livechatinc.com","ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"domain_registered":"2005-10-31","domain_rank":36142,"first_seen":"2012-06-22T08:37:34Z","last_seen":"2026-03-23T10:39:58.103915Z","alert_count":0,"request_count":1,"received_data":103468,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}]},{"fqdn":"vsa87.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3118327,"first_seen":"2020-03-11T11:53:17Z","last_seen":"2026-03-20T00:20:25.365596Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1082,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"events.eu1.segmentapis.com","ip":{"addr":"54.72.127.119","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2018-07-31","domain_rank":186340,"first_seen":"2021-08-11T00:43:45Z","last_seen":"2026-03-18T19:41:22.426378Z","alert_count":0,"request_count":1,"received_data":263,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dataspot-int-bucket.galalbet1060.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-03-21","domain_rank":0,"first_seen":"2026-03-23T12:48:29.032004Z","last_seen":"2026-03-23T12:48:29.032004Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":470,"comment":"","tags":null,"fingerprints":null},{"fqdn":"m.galalbet1060.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-21","domain_rank":0,"first_seen":"2026-03-23T12:48:29.030592Z","last_seen":"2026-03-23T12:48:29.030592Z","alert_count":540,"request_count":180,"received_data":8832265,"sent_data":105386,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"CodeIgniter","description":"","website":"https://codeigniter.com","common_platform_enumeration":"cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*","icon":"CodeIgniter.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"galabet.winwingames.io","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-15","domain_rank":0,"first_seen":"2026-01-16T16:03:38.346691Z","last_seen":"2026-03-21T17:26:27.22943Z","alert_count":0,"request_count":5,"received_data":58103,"sent_data":2351,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2026-03-18T16:10:57.776455Z","alert_count":0,"request_count":2,"received_data":2114,"sent_data":1058,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-08-28","domain_rank":0,"first_seen":"2026-02-04T12:39:13.107167Z","last_seen":"2026-03-21T17:26:27.896294Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1182,"comment":"","tags":null,"fingerprints":null},{"fqdn":"eu-swarm-newm.galabet1060.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2024-04-26","domain_rank":0,"first_seen":"2026-03-23T12:48:29.036226Z","last_seen":"2026-03-23T12:48:29.036226Z","alert_count":0,"request_count":1,"received_data":1246,"sent_data":571,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"statistics.22btcoservice.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-03-19T19:11:31.281073Z","last_seen":"2026-03-19T19:11:31.281073Z","alert_count":0,"request_count":76,"received_data":444539,"sent_data":35239,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-22T22:23:33.61086Z","alert_count":0,"request_count":4,"received_data":1799937,"sent_data":1837,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"geoapi.21btcoservice.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-03-21T17:26:26.445513Z","last_seen":"2026-03-21T17:26:26.445513Z","alert_count":0,"request_count":2,"received_data":2290,"sent_data":946,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"icons.galabet1060.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2024-04-26","domain_rank":0,"first_seen":"2026-03-23T12:48:29.025637Z","last_seen":"2026-03-23T12:48:29.025637Z","alert_count":0,"request_count":10,"received_data":640844,"sent_data":6758,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"api.livechatinc.com","ip":{"addr":"95.100.107.156","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"domain_registered":"2005-10-31","domain_rank":29526,"first_seen":"2013-12-20T14:27:35Z","last_seen":"2026-03-16T21:42:39.776913Z","alert_count":0,"request_count":2,"received_data":7204,"sent_data":1233,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":2,"received_data":5296,"sent_data":931,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"crm-lib.fasttrack-solutions.com","ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-28","domain_rank":1905587,"first_seen":"2019-02-04T20:13:24Z","last_seen":"2026-03-19T00:07:10.558163Z","alert_count":0,"request_count":5,"received_data":2940898,"sent_data":2439,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-22T22:42:38.000244Z","alert_count":0,"request_count":5,"received_data":2681028,"sent_data":2422,"comment":"","tags":null,"fingerprints":null},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-03-19T19:11:33.176966Z","alert_count":0,"request_count":8,"received_data":460976,"sent_data":5106,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dataspot-bucket.galalbet1060.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-03-21","domain_rank":0,"first_seen":"2026-03-23T12:48:29.041672Z","last_seen":"2026-03-23T12:48:29.041672Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":466,"comment":"","tags":null,"fingerprints":null},{"fqdn":"embed.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-03-23T03:51:07.565074Z","alert_count":0,"request_count":23,"received_data":1128052,"sent_data":10581,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-22T22:34:23.857339Z","alert_count":0,"request_count":2,"received_data":162169,"sent_data":852,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index-h75ZG17f.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e6fb5f626d229ec37be21290a0b075e0","sha1":"cc3fa867dc94d03668dac111dcf3113dd4301ebe","sha256":"e504d4704eb38187c36019a064d0bee4d69927438fe08c7f2805081e77a45bc5","sha512":"e909939889e127dccada323fe75003905e68c679aa8f9ab84a0221c8b470d2302f09162c12a7d855579e66fcf38c49824a2a34a4903e54dc6fa7dafa591a84f5","ssdeep":"384:0Mci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJD:0Mci408FFnJrIjE3D/OY2E0xqpc1NKki","tlshash":"818209d0e3b4f7a642e86add80392074f2248c28747dd0f1b6b6edda70664ca856dd37","size":18027,"data":"","first_seen":"2026-03-23T12:48:40.531882Z","last_seen":"2026-03-23T14:49:47.299999Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/events-u_DN57Vs.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ad98ec9ddada2bcd31bb022c30f7f60a","sha1":"d7a51ade0962e799f9e3e0bd852dfed3b467f387","sha256":"000ff9760d94fe967a26f6c9ccebf318fd3860f73a1e61a546bba7ed1c43ecb0","sha512":"cc97f67671f03b31b9bf8b22c19bebce24caf2b996124f07de0732aa43566dc2723a361e1023a260f248b9b01275f248ebc141fb2fe25bc5abfc0184e426d8ba","ssdeep":"96:7d9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:73IM2sWMtBq6n3PzH","tlshash":"23c144ccb38574b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9e4126b78","size":6141,"data":"","first_seen":"2026-03-23T12:48:40.351459Z","last_seen":"2026-03-23T14:49:47.225803Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GoogleTagManagerTracking-C-Mb4Lcd.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5b1aae3b31cc6810dd6fb0c57df8e3e","sha1":"b5297b43338ea1961c624b06ea02b3bbee1db10d","sha256":"d9a4b7fa85bf72dac586ebf819ea1c005c2be5185b93143ac15d8c437ce301d8","sha512":"2cba15c9a407c751249731946c8c1684704e8791dd01f7859993c5a1da0f5ebd6c742b97568049673f77ca2bcbf371f3dd78bc77a754417c0698a047e25e2e08","ssdeep":"384:Y5Kaah6ftomMGxGLzP+/0dKRC5kEkMkMkokcgPFXGByxhZ2:SKaahSz4LzW/0dK+9FlzIcAxr2","tlshash":"7162a7e7faa918e0a57d5ee81f9381c239b5756af0814070787e3c0c237ce4af1d59a9","size":15159,"data":"","first_seen":"2026-03-23T12:48:40.335424Z","last_seen":"2026-03-23T14:49:47.180244Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/Odometer-BrD_5lSq.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ecee9d7682188e6cd0acb84e200b94e4","sha1":"f02b9f2b5212ed4ab461340034155606a70f8ac9","sha256":"9e657a26d22b6c4cfeb2ce0e419253640b4fc555dcd5eb2198d31768fbad4c71","sha512":"dfeae4eb3de2faa3f007d0fac0ecbfd7c80c8e63b2e3c4a0d193f0aaa99d76d6d0ab60d2fdacb785dd718889d65d48d00825405fe4a333b6c5a73a573badd412","ssdeep":"384:wmNkVQ3W3r9JDiuyEmwHmP/T9tPpwxw1Z:pkVQmb9JuuyjLpow1Z","tlshash":"5b62098979627234836371e055bf4609773b6d6a3808405db6bcaddabe32c04d12bff5","size":15462,"data":"","first_seen":"2026-03-23T12:48:40.369535Z","last_seen":"2026-03-23T14:49:47.292451Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9tLmdhbGFsYmV0MTA2MC5jb206NDQz\u0026hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=eqr15pe79bc","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d84278204a43630824b8c3ff0613db14","sha1":"037a0489d9c3bb69b64ad4421066db294ed57d36","sha256":"8363ad23d23f5e976c2c97d70c1c746167babdf33f0af213004e2e726c8686dc","sha512":"00b988edb5f82a45e9bcb40b3191c7b47980d4ba85a78d7930c47bcd5d3211773b74d8fa6ea809749b4eeeda1c567338ea479e480677c394bfc7c78e9696b7f5","ssdeep":"384:AOiRVRdp/ab+vacu5ScaKbfbf0FU9gBVnaey7V1L+yE4mLX+pd8kORozo+:A3vp/s+ihscZT7UaeFqmqz84p","tlshash":"8dc297e5f652f07d4173b0b0806f116ea1fb7d55e808288df104c5e92e72d9a606bfba","size":27989,"data":"","first_seen":"2026-03-23T14:35:26.240979Z","last_seen":"2026-03-23T14:35:26.240979Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index-Cq3w_vEM.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a58127c93be7720d2074932770ab177d","sha1":"a53cf9d08b7373e1e081b9731f97d692444f9c9c","sha256":"93079077078a08e33c856d35cc0cb0dc513918ff1edeb4c46cf26219f9dc70e6","sha512":"80f4b02ce5feecb19321e2e13d7bb5c1568d8fb801d406d3e01cf91258258ed0bb83d01b6d54662ad20fb4430ff7a0012a764bfc0d1e7e3d090fc19f3a9330eb","ssdeep":"49152:+tVV3zdlJFQQr/eTh1ZP80CLsVX5PK8ojNblA5B8:0LsS","tlshash":"4e95d34aa2f224359223b0791e2fd51a3625490b5d9cfc683f9c92541f4d43ea2f2fed","size":1941038,"data":"","first_seen":"2026-03-23T12:48:40.680518Z","last_seen":"2026-03-23T14:49:47.366595Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameListCompetition-BDuRlusP.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8c7e226c4056f027af6fc99b68e93b69","sha1":"f9a0f7b02bba58c2fce021f58c56fac8edd2600f","sha256":"38606f5f3f9bf8a4a1355e11710b9ea0b341522549260843a1ec0dbb59bf4176","sha512":"1bab478cefb9b1e51be7d592ee85eb9fbd3cb8800c320a9bc8fa45253a24c8ac0609b44dd69be673e327f018f0bfcc1bf018717e4c942c023d75123d1d60ca92","ssdeep":"","tlshash":"0bc0c00284a44bf5650315d0072460010031803ef2f441c0c02046014c3015ae00edc9","size":167,"data":"","first_seen":"2026-03-23T12:48:40.354399Z","last_seen":"2026-03-23T14:49:47.214559Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/QvLuXwupqtKCyjBw2xIzFLIf/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"acb7d4a922d9a5a1337aa1a24004e1e5","sha1":"9acc0b5a3519c24e1ce224563d475d5a744ec4f2","sha256":"95abb266a8ef0207ba8032e78ee565442c8a7998b9ce06dd72ae5efd77c54798","sha512":"d065a75987917ed45d3235ec749d25f797038d701c93970387a7e77f599fb936dacefdbad9af50e39436f9bd78b08fcfed405c5915ea1c6cdd8f699269dc64e7","ssdeep":"12288:oGRVW37Ok82oIqOHTTQueAQ4CpSen5fIcH6et7YIOl2:rgOksIqOzyAQ4CT5fFH3","tlshash":"4a053ad8f0c675b95332b4f52477100a637d891ac95c085eb2b885f13ab3d4960bbebb","size":863710,"data":"","first_seen":"2026-03-06T17:56:23.511704Z","last_seen":"2026-06-17T18:21:50.595333Z","times_seen":8661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/walletConnect-CiycSUBb.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","size":1998,"data":"","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-06-06T21:30:11.623634Z","times_seen":1659,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/NotificationsButton-CB7B8FLB.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e022315f157d72e3309d566233f1dfe","sha1":"284ff846b84c64713f2fb946f38f6f3dc62b136c","sha256":"3e91fe9e173e5930927fb72b0234a87d7766ede59cf93812a41d2b3a654dcdc7","sha512":"99599f85b065c3ca1adba0154405e729d1966a77e49f6c5316da0396bce45f5c2687c48c0d494ddfbda0d0b1313e19b6738ee4cbe9bf723ffd44bda2d40a4898","ssdeep":"","tlshash":"0df0c647a999dcb51bc3467063379015293e682daf0a544004ab3c95177005ac55f95f","size":558,"data":"","first_seen":"2026-03-23T12:48:40.341597Z","last_seen":"2026-03-23T14:49:47.212494Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/DataspotTracking-BwPyciEj.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df8874cd1808095ad8d3c8a950d72086","sha1":"7fd997c670d4e0b4fc9624a59f5304641c86f3f0","sha256":"680665a2e420eafb88c85181f4c48ba09bce81a037536d572d5e1804e6458b03","sha512":"9af6fdd751cf45864e45f744f12654f7b9598eedd6d2b7228cd6c0b7b82c45f927e31ae874640f06ef43c23e1bf4bd19e49ca5fe369552ba60ee49692dad2b9a","ssdeep":"192:bw4ItlJYl7Mpqk0bj0JMKb0xdsnBdOSFPb+fGCg:04IXJYl7PIZVFT++Cg","tlshash":"14e12245781d78bca073d6ac0d4752a118287441e6329de076a6cf5a9e38cc28bf37db","size":7034,"data":"","first_seen":"2026-03-23T12:48:40.36562Z","last_seen":"2026-03-23T14:49:47.201964Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/useJackpot-CNwJD21E.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cf614a3a2b135acd3fbb3cc58fe2fdb8","sha1":"71e510e5a1532628f02eaabdbe21336fd68bb839","sha256":"0e4cd18aef6d48edf1e25e902f1c17ab9d03b0798b0e6f90bf7ce8f362ced0ad","sha512":"c2801a589712a671581818d70d5b8e8708add036a53d31bf11b3efe5dc4a28e66303251ba11dae1be8c774169e6777ac8010dfc548bebe85acdf31679a462416","ssdeep":"","tlshash":"5b01efc6408ed5fcf28a48f141b28b6e233c3f3ab60294a0d19c2a5e9354c0eec25682","size":846,"data":"","first_seen":"2026-03-23T12:48:40.290148Z","last_seen":"2026-03-23T14:49:47.20994Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/tr/","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3166d5139ebca4976a7df164026ff20d","sha1":"d7405b66cf00d1db4dc3140d6b1c63bca60fe4a0","sha256":"b297727d234af0837389b8bcaa1e72f4d0b62cfc126a4b9bb76201c5a52755ad","sha512":"ae0db71fd045eb0b103fd15902be9eb9a72763fc8494c7eec08ec13288bb0a46f320674f46a6467ba33f3869d3c388f15a83342bbf86aa38ef1810ed930d046c","ssdeep":"","tlshash":"4390024d71877261454126ed546a1016d3354480561c0113a7010081389814e42a5b8e","size":52,"data":"","first_seen":"2025-08-01T02:35:18.735752Z","last_seen":"2026-07-06T22:32:47.104782Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameListItemStats-Bm1vNWgi.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3f60a0a0d328ba59bf948348c43a0d76","sha1":"551457eec97eacb140c81ec1cdabc40b0d1ba927","sha256":"3f05a290ce7982a318568937d38f30f92c5111b8ea96e47d79306e9ac0d82d06","sha512":"8de7e251d92c2d26c2dd6743535f334b49176acfc91c39b1dc61824554a25817705b1c02f28f97efc4dd5e0a8762e7760fd3bcb3b08377c2daee3a8174d5f9eb","ssdeep":"","tlshash":"f8717482a1309f7d75260cdd69af2a60202a0755e919c6e595bd1f3f367800e3327f7c","size":3575,"data":"","first_seen":"2026-03-23T12:48:40.302588Z","last_seen":"2026-03-23T14:49:47.291249Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?render=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce88bca3326c253fe88e426ff5c1cfda","sha1":"62d18069c4e2aabe5bdc678eaffcc0c26385a423","sha256":"8911bb2859870bf8a6e48f94c22cadee37354d536c10effcb969bbf0d7ed4191","sha512":"3e3801f43d16f6783cf5cf729ece5054a5978bd7ea96f8b0a11fb95ae33da5f2aa43dbd62ad5650457216453af52ed7dabbd7e61020cfba43d99ba22e31af291","ssdeep":"","tlshash":"011135b31614a0350b3219e1e1ffdbb8e452701cf15885d8e551eac82f7dcc7ce15544","size":1054,"data":"","first_seen":"2026-03-12T12:59:10.973708Z","last_seen":"2026-03-23T14:35:26.040237Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index-RoKIdEzn.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6ba0618454ca470f4b0d4bf208356c2","sha1":"22638b0b37e9be355c896ad28bacdf581ff2ec9f","sha256":"61b39cbdbd7aa6c5398a95a772c2f1f0ede32c7325311303bde0e1c48f6a5b6d","sha512":"cb9f93f2808fecc323d30947a9a2a54b17eda583d1da8745756e8a126c35f34a67e74673a1480c1f2e82f469a7fe4ce149eaf7023a9c025be7489a2f224a629f","ssdeep":"","tlshash":"9f5111c76042d7b8afe708e6829b10b074374e5cfe1f449092be58864958792e36bf4d","size":2923,"data":"","first_seen":"2026-03-23T12:48:40.293283Z","last_seen":"2026-03-23T14:49:47.30159Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87f83aeea14051d9edd97ec3dd41fa0e","sha1":"8649c359a630d1c55eb268ff051d5a284ef7587e","sha256":"38a072ee28e39fadd2153244a3f0a48df473ce7d8dfe16e2f2fcbe5d9cd0bc6f","sha512":"c56e03220951ba738fa2f29bec6d02b1de5ca769f1f41c39ff3f12334b16d0a82db78487c4e4cfcd8fdfaddf4af6b923c725af335346028224efa849bc140eca","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCrGN//h6LiJq:SzP2DZSLi8","tlshash":"37822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","size":18392,"data":"","first_seen":"2026-02-19T03:13:10.613764Z","last_seen":"2026-06-15T21:26:04.434078Z","times_seen":8479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MCEY36CK22","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cc4a396d1ecc1d4768a74919b6a6266","sha1":"124a6bb9b5a0a82e4969ec115668ace6efa337c7","sha256":"548acfe8ff34c38f3a808ffd27de015b48d236dd05edba163d6b2d1b397a7a78","sha512":"9569f5f07fcfbd50fc83884c71a4cca5e9856f43bfa2d504b4bf160c1ff9c886747a421b4e17b9b251b66d1a00c6ec5157aaa630cb2f785b7e43f2de7856a423","ssdeep":"6144:v4RJ8B4fKAfICc93KwiKHnm8SBtS5K2wzO3Qpan8Gv/UywU2yIS+p:vf4RfICAbHm8eeBUX","tlshash":"73a4f9ceb3da70265396f478903f018ba57b28a2b45cc899f189cce42d7465a4277f7c","size":465790,"data":"","first_seen":"2026-03-23T12:48:40.317485Z","last_seen":"2026-03-23T14:49:47.35703Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9tLmdhbGFsYmV0MTA2MC5jb206NDQz\u0026hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=eqr15pe79bc","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"578a07ff6507f2091c80b0825bcbfb20","sha1":"b7858f6ebe28131548c9e1a09c862d34b1bf28e8","sha256":"8b3c7f2b8fce951e0830f62772f9b4ee57949777851da527a79f380428119744","sha512":"8719a80a419f93f6556cb803f0a9787493023181f763a2e3d3c02205b63fed6da502549f1452a11723af906ae7281e8de7320dd47a23111544b5f275de38f300","ssdeep":"384:6OWRVRdp/ab+vacu5ScaKbfbf0FU9gDVnaey7V1L+yE4mLX+pd8kORozoO:6/vp/s+ihscZT7EaeFqmqz84N","tlshash":"7ea297e5b693f07d4173b0b0807f116ea1fb7d556808288cf104c5e92e75d9a606bfba","size":22045,"data":"","first_seen":"2026-03-22T07:00:22.758108Z","last_seen":"2026-03-24T14:01:10.313011Z","times_seen":1524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-17T09:23:28.231955Z","times_seen":93667,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/AppSettingsButton-BNMcbAMQ.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10efddc616a357680413a7c3f1d1574a","sha1":"684c4466c147b9f78f610a76844fa85c98bb5f57","sha256":"91cb8d17acc6d4ca2d6a1c8b4985e9f2b6e9b6fbca59fb20869bf1cdd0536fff","sha512":"5d5b25b0cc52f27b48bacf62d852a841e9b09d59dfbf091bd88897004d1a9ccd36b008cec88141f63e598b62434d0e6326b5620b8005536c03279ad311e65de9","ssdeep":"","tlshash":"7fe0c0c791d6d2fb03e12be1c61bc1053e1a7c38c349950140bd74617af4186c15f66b","size":385,"data":"","first_seen":"2026-03-23T12:48:40.541086Z","last_seen":"2026-03-23T14:49:47.25734Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2363889186e23777b4b704661794f3d","sha1":"7f50ba76565cbebe1ce54ed6e30f3794fee96554","sha256":"f71def488c2fb369e417b84e2088a8c9c21a59a3d1dffe4a43f4dad196460b8c","sha512":"4fb51fd523149c9cb04134a77d41461736a1e832dbd48af01a71d47843a56fed5a4474275e8752a2460c3cd7203bbbe9fb897a4c027d81a6b446973169d3eea4","ssdeep":"12288:xF7gB5EvtEvEEvtEvud6Bg1qgn+w7b7EqGDeuPLK3c8WsIJS8oqIpCFaFIpSAJyO:xGBzd6BgJn+wT8ZI3I5Z7y+","tlshash":"688533582a6bf3849409d0d7f9373d84c59ed19aa44764d24fb24bf31bb2352eaacd03","size":1831195,"data":"","first_seen":"2025-03-04T03:23:02.060485Z","last_seen":"2026-04-13T13:13:58.719874Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/BetslipControlsNumpad-5uPhIi94.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ddad8589eb1888b52c33db968bee65f7","sha1":"6a2b6affe09846d16474a308b4c31f0d52fe81fd","sha256":"b42d3a3d5a10bd50ce5232a6452341075fb91b8a17294fbe009e38e1ce08edac","sha512":"98cab2b5dd6f95118a38bf6a30fb2b0d3970d882068da08a396d7d2fd2a1f0b99fbd9829ddcd0d3628f27d5424db22ee6330e648eeb31a957b2d2f9b1d317aaa","ssdeep":"","tlshash":"ee51ed51b001abbde67786ceb53e0024b00f2ba9d66811d7e47dac60bf6965570432df","size":2607,"data":"","first_seen":"2026-03-23T12:48:40.294625Z","last_seen":"2026-03-23T14:49:47.285306Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/tr/","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"73b8b49b4f5dd8adfdee877cd58546f0","sha1":"9f41caaee4b514ed017a6258c4a2166e6df5fad8","sha256":"b8ac084bd8c078db89ea019d31398c712a77cf27480be3b2aaaf7754615679ad","sha512":"b0dc33f21d8d930095dd34608c4cd501b4cecd139e1854fb636bb4e0d1722b22bda57425ebaf257860fc364a6ed9935865d391026a55c36bd7cbad695321d11e","ssdeep":"","tlshash":"6e4120b937867cb200f96633d6af771734f5d071d4018c10272adc896ab9d6a41a7c6d","size":2178,"data":"","first_seen":"2025-12-24T22:39:16.422871Z","last_seen":"2026-07-06T22:32:47.099131Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/analytics.js/v1/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/analytics.min.js","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.164.239.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"26d5c6e9eb5b8acc5d7f0a4acb0bb17d","sha1":"f28c859ece3ceabce922bbdf6272f9f7e826b783","sha256":"8ee1aaf2ad1cbca21e0581993206ba9ffd736c611beffb7287581a87cab67ff3","sha512":"388bd8e7a24945d1a3db30cd4cc03f006d5222f5b399b6578eaf9f87707fefae25b423aa0657dffd191f980827742165f1cfe7577a899ac63ed728bdd9886ee0","ssdeep":"768:IAObYQP9MBTSbyDRP0aubWc+ZdLyiQL96+hYs17eFCgt/oJBpntD/PN/xd0MpIJ4:TQP9MqMZ+vCBF/g0vmBuNfftrcuk","tlshash":"8fb371c8f6d6f064439764b4803f510bf23eb96e680e8464f266dad26c7899d9133f78","size":108916,"data":"","first_seen":"2026-02-24T14:23:50.976435Z","last_seen":"2026-05-22T17:22:58.310306Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/jackpot-DGmLRtK4.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"564ff0363c26b2c1174cd143918febcb","sha1":"b816337fd7dda0ec9984344f8cba0b8c5164f388","sha256":"082d8826ce562cea90beb4d7ff16faff0b692b121e16518b70b87005d7b94d89","sha512":"60a7ca097270eab028868ef316969a2975d4b142b6bcf6f8b87a5fb7f4f553ac7a11abde4496a2fca1e91dd9a8f0a09b2d75a5ce7ee7bd31e5ec858757ab86d0","ssdeep":"","tlshash":"efe068de99c04eff91b0071a2ab5088809241a86100f94f87f7632722406bc828f8a38","size":382,"data":"","first_seen":"2025-11-14T23:47:17.853619Z","last_seen":"2026-03-29T05:41:25.923222Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=ff83b5d6-c81b-46ff-a19f-41e5f7ea1cdf\u0026version=263.0.2.32.102.113.2.3.2.233.2.9.1\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.100.107.156","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f038f2c2b082e4fb5012e03ed4fca68","sha1":"14d73588ec6523a072264fa8f3a84d7f325114f8","sha256":"dfea2a7df43a2ccdbe07dae60e9fa59ae8f44329a1daf8f060796e19d555dfc6","sha512":"b284e475071489da3f1fb7e6f5a9b718d355b51fd93ed77d644fe6a576c147c3e84243d934cd0b85875157ffd6d3ac16b85c772a7092a2ca93b01bfac64e17f6","ssdeep":"96:80hUsXhUA4hUwhUcaDl3acJ4t017gWrZSN+/9YXtJ/xN7QcGIIKTe3+/vCaq:FGsXGA4GwGJDngSZTqQ1Ih6iKn","tlshash":"62c17426835fc8bb7377925a62cbb70f3108507ca5f8593fe464ca7072861c7d202d9a","size":6154,"data":"","first_seen":"2026-03-23T12:48:40.643776Z","last_seen":"2026-03-23T14:49:47.189098Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9tLmdhbGFsYmV0MTA2MC5jb206NDQz\u0026hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=eqr15pe79bc","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"497770a2ab62f2aa5e9a92139301634d","sha1":"49c10647ffe35e24f84f743006f162ff0fe16399","sha256":"0663d282ac18b3e9d3e81725926a5310e5cae5e6954873f09b7ee193136fb5e4","sha512":"94a5141ed28656c5873a486aebfdda52790c8517426987bf905bf3c44163a25932ab17ac498215ddbea8e0e9887a8dabe6ed80acc950c993bdc61ecf977724b9","ssdeep":"","tlshash":"06a001b2053584208e6299509553bac4e187605dfd81819470265a89f3e15e7d144940","size":72,"data":"","first_seen":"2023-03-07T01:11:36Z","last_seen":"2026-08-17T06:09:47.011982Z","times_seen":28483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/anjou-js-proxy?seal=02503637-3458-4264-a556-a663e82c28cb\u0026domain=m.galalbet1060.com\u0026t=1774276471067","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69af97b54c671a4e5b34618cbaaad853","sha1":"96b474df0a48af308ce6d0ad66951be2df60be98","sha256":"30adc6ef5644ea9e58921375a11b51b742dffb6b96d2872dbe056a080a97256a","sha512":"d800538d8b98489cd4eb6581a605c08827131423e5355a461aad487cc3c6a10f6ee9713ad0442694bbb721acc36b58f138fca8ae62be1608ceef6e244946d45d","ssdeep":"","tlshash":"3b5123eb6a9085ee13ce55b73f27728cd25fcc4b3aa11447ea246c907944a25c6bb234","size":3031,"data":"","first_seen":"2026-03-23T14:35:26.214767Z","last_seen":"2026-03-23T14:35:26.214767Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index.es-BOQ4Bx4Q.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cef3ca896e60f2745af080791e263ffc","sha1":"7da2625efcc1ecb9d44f256d13e9307101ea41af","sha256":"8197508dce56a9911e9ff0721426430a6835dd62468d5622f37ae597568d03cd","sha512":"48c3f764e5db85303d4b2bf0105a9eb94c60b19867e3541f96788833a17ae1f1ce95f82dfe35e3faafb6af89de5c474b2ee6588041ba8a9f02565f8b13107ef5","ssdeep":"3072:nzCw7+KZdQZv/7VXKAMJtSu7vYK9u6INz8P1jXJphlzfl8FnN1Nd6U8h:nz77jdU/7sJJMcvYisoljSFN1Nd6U8h","tlshash":"4554fa8472a7f47543d665a8943b1542f23a5c64700c902cf6acfceebdac4499a3bf78","size":295236,"data":"","first_seen":"2026-03-23T12:48:40.552221Z","last_seen":"2026-03-23T14:49:47.248342Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/ButtonWithAction-BLYSmFxL.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e9c1bbfc27a80927619a931fc4a71e9","sha1":"063b2f6681cad181f0afeb2d1418c0a903b51849","sha256":"eb7b34068e48ca7e28588cd4be978838a758db62c428a1823f2e0db1260bc52b","sha512":"99a154cbd0b8e3c46482970acd076a872e1acf06f638c1dff0facc7f13a787035b59219f9762d03ad83e7917735613eb63c4b368f59e6693e1d24bf050c7b3a2","ssdeep":"","tlshash":"08d0954b5495d5f603d276f0a327c0112e196d64f7988541804d34503a7195ec53fa3b","size":267,"data":"","first_seen":"2026-03-23T12:48:40.309467Z","last_seen":"2026-03-23T14:49:47.233145Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","size":53530,"data":"","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-06-15T21:26:04.427415Z","times_seen":34009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9tLmdhbGFsYmV0MTA2MC5jb206NDQz\u0026hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=eqr15pe79bc","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"93a900103067ada5ccdd5ecaaa444d98","sha1":"15605a8bc8b36e456c5aa49f095619636dfe67a8","sha256":"a3b95724210f49468aa464685418d350ff75febd1157629b17309a08ba3e3fd7","sha512":"4de92e4756370ca8b6736179a674d70e755247b8afed3fcb1de493e84853f073c229e244e1fde2edcc2e326d73fd772a07c33c6facefef80c4e5da2563586d80","ssdeep":"","tlshash":"cda0027b3e25a64962293573568750cc41e6b01514110cc9989861822626a89e143efb","size":60,"data":"","first_seen":"2026-03-22T07:00:22.756413Z","last_seen":"2026-03-24T14:01:10.314817Z","times_seen":1525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/JackpotTimer-DcWVJiLf.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c34cf87b44c20d7e6fc42ddcd4de729a","sha1":"a60aa6dce2a01309ef6351dec7366c8e780004da","sha256":"c3c1ab89cd1b9fd9fd922a9c87880d89e4d2a7cf3810579f5871a6b22dd20a06","sha512":"a17f6ce1c530a33ad5eb6968fa68b188a6ac0a58d80a3643b3702af0686541ec77d8bea0b4be55172e36444e6eef72c7f74e44386a7a6ffe7fa47314e70ee7b8","ssdeep":"","tlshash":"2281ab08d896fba9eca64883587f4038364f0a69d7a844f8c0fde9354d6c98f760778d","size":3991,"data":"","first_seen":"2026-03-23T12:48:40.39772Z","last_seen":"2026-03-23T14:49:47.215619Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/BetslipButton-BtoraXlt.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"06855a1e3c0f37da0d0b04a96020594f","sha1":"74fd4361e76e2f94d8e661f08aca1b5225fa8422","sha256":"d181a076ea651d38c9809e24f427508a277339684199e1f899804104c5935c87","sha512":"e948e373af61fa504bb82cfe80e34ddf084c924dc30b882f5fabb53de23938af65c551ce5488745a38db0a0a20b381f787cb982482ad8117cfb11de9e29dc1ee","ssdeep":"","tlshash":"40e0f1c7c94cc1fa4b9219d22102c222382655bca348f58180be3cb23fb4989c82f93f","size":418,"data":"","first_seen":"2026-03-23T12:48:40.382231Z","last_seen":"2026-03-23T14:49:47.311634Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f76cb77e2da672d4d297c1e83a089b0","sha1":"f04be003d238ec86ab41812fc3ef69a976f064a2","sha256":"bc714cbb70826372337fcdd44aa95fc908f417f19fbac877d37868de7f139d18","sha512":"edc5f0158f9c189b466527c58b89a115f1edff7d7ea2f219566765f0ef10eeb71e2ff6dc1f0a95e6bd0ef7747abdbc61f583c8275a84fb1b34eabf1ec8a694ab","ssdeep":"","tlshash":"dee0269d29807d21a25396a716f2de4c38e63024a555d951a99f880c2a28999c92cf58","size":334,"data":"","first_seen":"2026-03-23T12:48:40.672678Z","last_seen":"2026-03-23T14:49:47.376419Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/useSelectedSportsbookGameId-CKK_yRTT.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b9e1bd389a4076c7532d96ecc3a337dc","sha1":"9bf218ae6f2478b236998838155c5ad292131871","sha256":"1b5ec45de6a85879e78a9cf881b896464a7e55d770416f9c5f7f3771fda9de0f","sha512":"ad7cf978c028b7c9e548b08044a9d53f91505d79793b889e1eb1067eb9b20a2785ae576f1d450ababe41a21bc6ea4a1a02f60f4905ef518064fa38965d58cb2a","ssdeep":"","tlshash":"8de0618d44e556f022ac8cdd1112e012031c28157537cd68d0078f3252af54143da671","size":379,"data":"","first_seen":"2026-03-23T12:48:40.291859Z","last_seen":"2026-03-23T14:49:47.261806Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-app.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2b96460440b1358a43a511913fcc46a","sha1":"815bc669e0c05413dd3618b44e995de5200098b8","sha256":"6a86bcf9466e23eb5dd702ffae4b53f730cde0c3a160ccfff8afca7169cd7c98","sha512":"64c88dfbdb85e2b328f8e690a4829accddbc943dfe479a4210ddf28c872f5fccedd46f23c525e2653f27d6e3d24aefaac7d9500f8027c0f08ab2be0abbe58d13","ssdeep":"768:HQzjpSkGROiRfEu8T3eSwKo2hWN0Kh4yPaw6ANGp2u+A47WFfVVoO4kC:wHpSbROiVJ88hawKV+A47OVo2C","tlshash":"4773b88db1d2badd4de32021535b3604f23b1974542bd484f7acedd52a28b0be227b6d","size":75107,"data":"","first_seen":"2026-02-12T21:09:52.719393Z","last_seen":"2026-04-14T09:08:05.884309Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/tr/","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"932d1c008400401a55681904391c206c","sha1":"7cc9f4d6461805e1878406a830a785ed08d9adbb","sha256":"24cbc4e4b2c15b32036fbb84d653cb480e0818fda8318d2a806d8c3e8666dcdc","sha512":"06be73e2b9709f0164075b7fe30d5f2c03288af4d97b5eac9c0d77cd04b238efe0bf6dd746c6c9063b2f2edd00fa981d58769f76a1439687e7b0582a4d78167c","ssdeep":"","tlshash":"b421d6e238630473061625f7a93fb188b479341e2e0dd821c04fd9a839a9fdf81a3a08","size":1405,"data":"","first_seen":"2026-02-24T14:23:51.476805Z","last_seen":"2026-07-06T22:32:47.10213Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/firebase-messaging-sw.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6d01c0cd5391e7b6a5ff465d0813103","sha1":"093bf5f4adeb46d6049d53e0eb9db7689fd77186","sha256":"5133ce5b94270ef5d70b312d46e149007029e2f78405ad3b88050b8e1f6b81e9","sha512":"b47850377e50bee538c991b658ac372da87e20abcdbe47ee443a13e676dfbe599f3459a9300c2123e80023e7a5d295f308b51eafc91da4403d4667f712f82ac3","ssdeep":"","tlshash":"cc21cb124be2f8231e4104c7679f32186e290d2507b0f5de61bf56b86b0a57b206bbc5","size":1127,"data":"","first_seen":"2026-03-23T12:48:40.613577Z","last_seen":"2026-03-23T14:49:47.298264Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77424425bd755d02077922d40a96c207","sha1":"9702eba70ac4506031d55a8c9cf6732a66853b2b","sha256":"1128f463d0038310bb65c71ee2bd50f52e40dd9dfc0489e127f3912a1aa728ce","sha512":"2ac723d6ab08dc1cf45141cc44966d9b0f01c892511f40148d785de61ac084e014799555bb3b574f6f8b78e9410df8c112fd437eafe0aa747babdc52b451d1a7","ssdeep":"96:zNC9Hqt7pEma7hY/rcKaJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYcLRIvgx43nVY","tlshash":"13b1859ef247b456c156225150ef3b1df33a281ca61ccdc8a66565f218784cba077b39","size":5261,"data":"","first_seen":"2026-02-19T03:13:10.646706Z","last_seen":"2026-06-15T21:26:04.407976Z","times_seen":8491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/p.js?f=sync\u0026lr=1\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cebc7667967e601f02df39ba19712d86","sha1":"c7d3677008d76115cc41ba1b734aad112c743dbf","sha256":"089867e58a1de5998b0d74b779119d8a30fe54616ea3ce76063a5530163febea","sha512":"80a26888852e4a15ef49580494958b710628b404f4026c5b218daa918280b24a8f2fcc698ac49ee66c6e9b91954c54f5f296abfd4645d71cc32c83d4ba199378","ssdeep":"","tlshash":"2b01c07d5b86312454f634906b2bbb4a743b12be5c535808848d0414a3a8bafa21add8","size":697,"data":"","first_seen":"2025-12-24T22:39:16.348988Z","last_seen":"2026-05-22T17:22:58.055376Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9deabdd1848c34f3ab46722f446c153","sha1":"ca3efc8a6fe26ae3556374b113dda96032edd201","sha256":"6a583970080e55cee4ced2fc7d5e5de94283f0e6eea428a50219b8e343ff0890","sha512":"d260841afedfa06bc864b92b64cf3bd1a323b2de447ce38cb1499cc6fccfab0da309a76814b6cfb20fae85fb5707fc72fec9996b64bfa31703445d6a933daa3c","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOrcErQYIMPdLMz9o115:kyWFW1W+fM4fFkBLMz9215","tlshash":"7e34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","size":240941,"data":"","first_seen":"2026-02-19T03:13:10.643204Z","last_seen":"2026-06-15T21:26:04.425371Z","times_seen":11131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/public/proxy2.js","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1296781ea2c9cd24e19fe155b42373f2","sha1":"d7ce9dffbb2482bc2f3795cdeaa727d99e49644d","sha256":"de74ac92be5c23abac0e045e3380edf98b53abeb1abc7351e98ec06a71a01359","sha512":"3922435bb5f624625705a335938c57a7addd890b26905e7097bbed9882d0508fd10eacfd3fa32cf5b570deece89987d97773fc9377c68416dc03707c32e4af72","ssdeep":"192:0e/p461ScOtSD3FfjmfO6goK78IANjSLsZPiSLrBEpKYehsKs841+yUV22hhCsrq:l//Sk8fhPVEQGrUFAvRZIgUlM","tlshash":"ce92860e927b6123447334bc978ba146be1150971d0acd847f4ce394bf85b6eb6b27ac","size":19498,"data":"","first_seen":"2025-12-24T22:39:16.372563Z","last_seen":"2026-07-01T19:33:43.411538Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/useShowMoreOrLess-BVv1yUqK.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"11f63a5170003ceaf6e02e3adeed9a55","sha1":"f79ac5e167c6bc074520633766ae855bbaff6c73","sha256":"bc5c48665af23b427ca0804cfbac6296caf2116b59da14afb36bb844f1df2fe8","sha512":"a767b61b7f6c03527567a393517e204138bf087fe2908d6197865c1a05bbc53e2937223f08c2b556ef4eb540de0552d32ab4cca07cc92b812cf3e2ec68bed8a1","ssdeep":"","tlshash":"900110cab808f3ba81f816f80179d40570590dbdeb18a8a0a2e64945913c548b75bdab","size":726,"data":"","first_seen":"2026-03-23T12:48:40.410213Z","last_seen":"2026-03-23T14:49:47.222803Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/BetslipPossibleWinInfo-CqBcSdSY.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"423f29dca26db24f10e3106376608cb6","sha1":"4872000bf02d62fe47a96523e96b391bd1cddf29","sha256":"2907de9c6e00718c08c929d6287a44ca6a5413e9ddc56a1017304528fc5aafa2","sha512":"896a294262e9b04a0aea3d08da077fb7172b078221ac96c9e46d7250d3f4488409279121d4f565e46b172eb2e451c104df96d2ca7d9ccca26d4a124874c07e0c","ssdeep":"","tlshash":"87418515b444cbbdc4b20dca284d5134b02e6f50d72964a2e0fb2e385a7c99a7a01b8c","size":2031,"data":"","first_seen":"2026-03-23T12:48:40.502109Z","last_seen":"2026-03-23T14:49:47.243212Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8f033d3c7a50e4abe3d98ac65234d13","sha1":"caf431ea6dc8567be010d07f4f7d5798163821de","sha256":"7506c8f4d85e4707ab46f9858f0c6e65e3316b9d2f122dcf485b9dbf39d5a7ac","sha512":"ecad9d89ce602e5121c97135933a33122f0d9b32c15b43949d5fbe51fe576da069e9a416772117eb4666d8354b685046c0d7a3e086f669fffa488e2f05ff0ba3","ssdeep":"1536:iw46xylPIZSKcO355lcVU/SZ2DUdzI8bRj:PxYIvTlcVU/62mI8d","tlshash":"e173f8916a00f03776bb45ae65d1e7047ae99405fcb34894f42cc8804fe7d4f26b7aba","size":79991,"data":"","first_seen":"2026-03-20T09:57:21.567576Z","last_seen":"2026-08-06T03:45:53.052096Z","times_seen":2841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/SportsGroup__platform-l0sNRNKZ.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-08-17T08:56:32.156091Z","times_seen":230524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/JackpotPoolsWidgetContainer-GF_Y9WrY.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64c6590df221a20c1d966b70118f4346","sha1":"761b37cef4c23eb2e8dcc3d37422d135c128574f","sha256":"39103e32497aad940193356b77f09e7cdf5cb3b57dd6a770be3272c17fc26057","sha512":"5427c32c4f3da7c2104278c5420cb2c151b08b4c18fcdd26c11625a73167e409d874801dd724bbb9c4d34fa0704bea201b6528259167e26f477eb9a551496ac7","ssdeep":"96:VTSM7oF950GU0iXfLTeWIt+GrqOGtJTQzrexg3tSHWFeZ69OAF++TZSejMM2VQ0O:lSM7eU0o2r2Oecf6OtbewcA/TZSjSN","tlshash":"a5f11108e456b7bcece94893597f503c365f0ba9d7a504e4d0bc99344e6c88fb605b8e","size":8121,"data":"","first_seen":"2026-03-23T12:48:40.390524Z","last_seen":"2026-03-23T14:49:47.238945Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WL4QZ2GQ\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e03977d60f4806a18a174120d11fa9c","sha1":"8721c667ff56e40284a9fb58ae0f9347c151cf07","sha256":"fc7a254f4446147c19dbb3d1279f2efae44b9bcb013a4c67cd777091942c7ab6","sha512":"d68cbcf310dced7b5aab190049a1194bd8b7b8f25b98033e1823659f5b16a4d953f18cd16e2cde11e80839ac39916de71ef805082e90cb4fc3de243456037d63","ssdeep":"6144:FrL5bRuPtxx5oJ8T4AfICc9JKwpm8SB2S5K2wzO3F1n3wRXG:FrL5bRuPtxxbTfICao8Md7","tlshash":"a58419cdb7dab4664393a474903f018ba27a28e2b44cd894f086dcd43e706aa5177f7d","size":399907,"data":"","first_seen":"2026-03-23T12:48:40.624802Z","last_seen":"2026-03-23T14:35:26.049162Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/DepositCountTracking-BoRHw-Kk.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fd6ec90b730f729453f5188855d7893","sha1":"9c631d9eca7f7e4280a4ed5bf177919583e771df","sha256":"d325455799dcc39d884d2f5edee70e178f315a3a4992fd65dee13172cc3efdf3","sha512":"4562a3c2630fccf8689614d749462a48a64bc64a41f18e14d6bbbb2c188caa3d6425c1219c8349b357ed763275b224dc69c8827ef04e754214f3e20577a2215f","ssdeep":"","tlshash":"49f0029768b8d2f68a493ac473c298f373f0650db906c8c385bd4d4b0288003e4d8d1b","size":645,"data":"","first_seen":"2026-03-23T12:48:40.363807Z","last_seen":"2026-03-23T14:49:47.186086Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/withPanelButton-CJW4F-kD.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d7fda45402c809846f53d8d334af72f7","sha1":"42e20b26d0d4117e8548b3160aed53eb52a29246","sha256":"19777d1ca6f766959fc0d413358f0dbc1ce971dcaddd42093b8069edb9c58aaf","sha512":"6af604fe6a4de7d9c95dbc7c854efc1a748ef2c0bb058f9d2c6ce8a062eb648bef0af04cdc6b66955afa70c4960c1bd0f753b0e9402fb7f4977a623e242f17b2","ssdeep":"","tlshash":"ae11f0f4f584a9b2e4c410c8577b2cb2319e32cadce1049021a6c8e91fe8449961e9aa","size":1089,"data":"","first_seen":"2026-03-23T12:48:40.462683Z","last_seen":"2026-03-23T14:49:47.319293Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e63i0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d218d87e33bfdbf10cce8999195a36d5","sha1":"0390e3d4e96211ac1514f6659c53a26b802317df","sha256":"926e60b0a1fa0aacc8e5d7c2021d94b97e3a609536e4310b13d680c4129b92e0","sha512":"fb72b76ed384a411a9063a2d2c7f6cd981c2e19ec54a81a952e5363cc407baae47fae517aba9499cc23316a5eaa7f25408360d4b44feb8326866ff961691c7cf","ssdeep":"6144:VCJ8B4fKAfICc93KwiKHnm8SBtS5K2wzO3Qpan8Gv/UywU2yIS+p:n4RfICAbHm8eeBUX","tlshash":"faa4f9ceb3da70265396f478903f018ba57b28a2b45cc899f189cce42d7465a4277f7c","size":465721,"data":"","first_seen":"2026-03-23T12:48:40.279135Z","last_seen":"2026-03-23T14:35:26.063652Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index-CERoYtiV.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a4f057a6712edd11be1db7e3a3235f0","sha1":"818aa867f9d22d94294b9fca43b3bdc4a73fce5b","sha256":"3f1484d2ba3821634b52be157b083d021dfdf9574e1811584ec6647ea260f1c4","sha512":"0e0cc448372d386d814332f146812a13aa0de68db3b243f87f3e45eb0d48a75a6613ac3a37a09e40f668c1d98e5eee2084129f7785bcba38cee54558547f798c","ssdeep":"3072:mPwaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:KwhFHU4HNwFH7MoOWexZFHV","tlshash":"d9f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","size":157556,"data":"","first_seen":"2026-03-23T12:48:40.314635Z","last_seen":"2026-03-23T14:49:47.320328Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/PromotedProductsWidget-D5uChylI.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc6c757d757108b7050b7f5331eef44a","sha1":"d6e43452b1e65f5b80e7521a91a80cc74fa12357","sha256":"a366123f1d9682ca691b1e71d61907df384a2afc578b968b78004651f0e1ec21","sha512":"3c1358855d486f9fa8993cc42480bdbbb6a25e784bf895ace6338428bbb08cc1810d7cb0a6b284173293b0381003f32c4efc421dcc3f5bdf2ccbceac19a4deb4","ssdeep":"","tlshash":"133110cad538a37df23d0cfc020511c53a177d28dfb589a1e06aac06d039815ba16fac","size":1701,"data":"","first_seen":"2026-03-23T12:48:40.517018Z","last_seen":"2026-03-23T14:49:47.251397Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/FavoriteGamesContent-BzXk7Hhx.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a582630872ed88d3cf73be82a19f038a","sha1":"0bb2e1f0b100fb13810a3a10423f52c8cda65e14","sha256":"25b782407db9df7c35563b63090d18f6f87298521f6ab1fcc6567fdf09db7cb3","sha512":"02b7946bd368ac44e97421d7e722ca08eb3eab1b343440db3cf713e890ff83e7632522c09efb7754a77e5dfe4b8dca0a0d11e72268e086600647ac5a4553bcfb","ssdeep":"","tlshash":"8851751100819fecbbadaed92e2ad0a448aa074d6146d17cad794f7e30189407137ff9","size":2827,"data":"","first_seen":"2026-03-23T12:48:40.423352Z","last_seen":"2026-03-23T14:49:47.210469Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a344c67ab1b42e6ebb9c23e3bd916d99","sha1":"1b8af7b30cc9831348b1dc8b61cb57ae912a2b05","sha256":"216a409d1add9fcb0ec72ef2d4d02cbab37761ae2dbf41dbc2fecf6aae0474ae","sha512":"df8fe41d081450012161536e726cfe19aa425e2bd3544f8d3e612d9c623d4fc480ba7a60f9a9a6270a06121db1edb0a310b9d7e7d0ae9b5a1bfcd94980b07fe6","ssdeep":"1536:E5y/uRri7DJnagIckNmeuR5bydWiBwpDwLCPoRvCRW6Rtt:E4/uRu79aXuRxyk8vCdRf","tlshash":"07a338d67282b03493f785e7a17f6216b33a291c740d8410f17cec6a396a9878177f2e","size":102724,"data":"","first_seen":"2026-03-20T12:44:21.754759Z","last_seen":"2026-04-25T08:26:24.664416Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/___vite-browser-external_commonjs-proxy-B2J7BfA7.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"409e3678405c9d40f9e4eec72197b8c3","sha1":"dce5fce2d436a0a922372748a64c33b2bb21907c","sha256":"7a3557eb0b2f536f33d8b5ca15c5ce0e99e8e21acf0b4b041b56f1ea0f6b5d3e","sha512":"cc3d186015170909cbb11055cc45f2e8b34d2c9d22d593755bc50d01dfcf14d5552262c084bccc0d12fd27f972a4a9c88a09ec7ce6ea116f9f03ae4763f7a4d1","ssdeep":"","tlshash":"67c0c0041740dcb051470c82c2108001d20c4d2f73f8f4e0bf0c8d00020248e2278f07","size":178,"data":"","first_seen":"2026-03-23T12:48:40.606714Z","last_seen":"2026-03-23T14:49:47.19413Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/LiveChatInc-DL6PKp68.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"730c0c3c4b92b40fa9126301c858ab86","sha1":"97c8594773d095ff9f92a0bc01b7d23af2c83110","sha256":"769454ef5610850b20cd2cf85581e46b953c9516696f7a9e06efcd63e59d30df","sha512":"d0bb8aa77fb2ea30faba966aabd94e395a55873f5fa9e1b52ea0da13844e8bb91024037c310a137278ac2231f8ee8d9eea19d5f2fb2d47d8f920589ccda24a3b","ssdeep":"","tlshash":"e65133ddc47cb4b1929a67e1323f7b5f711a571a94048c30656d4b0af52a4cbc163aca","size":2920,"data":"","first_seen":"2026-03-23T12:48:40.361938Z","last_seen":"2026-03-23T14:49:47.194745Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GroupHeaderDark-C4imcPRu.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"31d5bde46c82fb9e1b1426b023f46bdc","sha1":"26ef66e5347555a9c100905c1f923f47bc6b16e9","sha256":"ebcd22f24e5ac863b234ceffa5c246069d0b1b824f05dd2257e9f9982db1c8f5","sha512":"960bca447decde377fbaa10bc7fc3f86fa0d197993d5d0426f7be84f26f71c514d9ef7d127bb0a72048aac2686117da1672df590a10f3160b45b9cc5903bc259","ssdeep":"","tlshash":"ca111611e424f7a9c42785c2dd6e0015757d0fa8de190551d07e56336a7864d3a0ffed","size":1075,"data":"","first_seen":"2026-03-23T12:48:40.337207Z","last_seen":"2026-03-23T14:49:47.302112Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/userJWE-Dz89wiSI.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"504d26b7890ea7d36082cf36bfabaf08","sha1":"4c1db5737654dc118b15480cd11e0eb4c932f53f","sha256":"65ce130bb19abd340409952394166610faeb90d4b4b9fa6e694b54cd33bb7ce1","sha512":"d1693b55b67ddcac46911748cf141604da4018402d203f4ab36ce4a7170fb59fc7637b61144ea8ad1895735bfcc3a4c2c5c875ccd8956d218845c786dd121114","ssdeep":"","tlshash":"b2c022db0cd811f7865828942005dc12823039186298d3415b0883aa6a9100fb20ca50","size":193,"data":"","first_seen":"2026-03-23T12:48:40.638223Z","last_seen":"2026-03-23T14:49:47.326634Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/MarketTypeFilter-BZbMG365.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5f35170ee9978d2966bd15452d2b6d85","sha1":"787ece6ccf338421310a96658c32766d3b28be54","sha256":"e003b1f8d7897a3bc2eac6580cefcf1626913420915d7a43ecc3280fe5c057e2","sha512":"d0af2fe38994087e4e80171f5529c494b8261fd966958359627279b6893c56bedb8848d3a16e58bba934b422255eb95714fe31416c7551e5cf7a1270826d74a6","ssdeep":"","tlshash":"1911ef45f748e3bcf23b1dccc56d481893210aa99b2946e1e02d1e960b51986a22ee8b","size":868,"data":"","first_seen":"2026-03-23T12:48:40.510581Z","last_seen":"2026-03-23T14:49:47.207799Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/expressOfTheDay-B7T-lcNd.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"00881bcc70d70339ab89ce3715673468","sha1":"4b972032e75db287183b5a5a1cdea54f485d6de0","sha256":"758e8666c9b85069fdcbcad7d14245a8225bb43c3f94083cfb5def1ac4160204","sha512":"bdd2a47cb5101caa57b5aecd048ec078098a249d3edbb60bbd8f4ac759306aa54d3cde18851f70e79387c300e12e7726c0aa478cc434bae83a26d4487e0f9cc1","ssdeep":"","tlshash":"1f01fdcaa01df73f1cdba0ebaec49485113078be65b271f0b20f0e8245bd008518fa16","size":759,"data":"","first_seen":"2026-03-23T12:48:40.60244Z","last_seen":"2026-03-23T14:49:47.31314Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-17T09:23:28.121693Z","times_seen":93695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9tLmdhbGFsYmV0MTA2MC5jb206NDQz\u0026hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=eqr15pe79bc","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"90c6eb5faf1e9b76ef3f96569ad39d85","sha1":"76ceb94a6849c1cbc7f6e8f21a86b70ba79c790b","sha256":"e644d28621a068e4d5e35c9de53112b1a5f81200a9b7fa9a05536623154225fb","sha512":"2533db8c28657a8915012d08eaf8523b6a33885a80eb9ce41bbde0ca54193b3a79d275ce8fe1cd5261090176af7a11da4b641ebd29597614c04c99e6196510b6","ssdeep":"1536://JHcHNuMuH825yYWguf4H6MiP6YcegIYjzT11yxliCUERiLDQPaCvNJSUtn4/1:XkfwtugG3gBx0GERqQnJFn49","tlshash":"4573ce3aeb4330efdfbe8f6016f1969c133d9087249608cd5a7a10c21a6edd772691d8","size":77602,"data":"","first_seen":"2026-03-23T14:35:26.247013Z","last_seen":"2026-03-23T14:35:26.247013Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index-CljhmIZP.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"de7f053c8c8458c68fbd84da04865474","sha1":"d41468f4486d1846556cd63328ccf60ec9ace0bf","sha256":"bad04d408884069f2410b400ca6314cbde26893b76cd9003f1dfc96a3784a2d9","sha512":"2cb51f71d4da6263b6206c640115762643b9a9550bc2f07673bd06c814a871f56177d87531e69e0e475b7e445fb418ed63a8393171cad8adec6fd281b19b1038","ssdeep":"96:T1SCtCFVeh7FHpokS73s9lsv2InwLRiTvHUgAaQKFr0FdWpA6u6PEDdxrOq+IHWE:q+ljijHvH0FdIuSEDdxP+Vj8Eu","tlshash":"37c1a65631906530c6d204e6914f42aeee3e6638f00f5060b23f9c6e3ba1515c6a3ebd","size":5948,"data":"","first_seen":"2026-03-23T12:48:40.450871Z","last_seen":"2026-03-23T14:49:47.2031Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/SwipeableContainer-DtI8xDnu.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"530881318840c137c3097d1161d60f9b","sha1":"0e6ff33294721f93bb25dd5ae66f5c9b9de44359","sha256":"837d2df39326f7b2f491dfaff92d81147266df5d35b9b98bd2321a19c4650243","sha512":"d703e73d7f7964a647e2658413b461d61bae690fde3a4f8dc5ac89e394f74362b890f497b6a357279377edd7e91bb04c2992a66b529ab467f60b24238a19b669","ssdeep":"","tlshash":"1131b78ad07ada70f522405a92a64474b3bb33a4fa0809e070bd4c2ce73565df71edc7","size":1866,"data":"","first_seen":"2026-03-23T12:48:40.533641Z","last_seen":"2026-03-23T14:49:47.30913Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/tr/","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6f941adb2ce1c3c336f01b65e00b5b9","sha1":"225bb5c32199edc5a116b0b6108c4e5308b28e58","sha256":"3131d130bcb57e9c2593c009769729464af0ba726b8821274bcd76e44e283f56","sha512":"995db58cf4462f52c3f124666f58d5ad9725f77b17342864521087a05333bc53a776ce1c8d2d194b5c5880ee09b72f31aeb536258aec48b96a4de62adcc013d3","ssdeep":"","tlshash":"9011147d3ce76848d60e9bfa356f978d20b7b8155d40cd90c189c498a555fc800a5bbc","size":926,"data":"","first_seen":"2026-03-07T12:53:25.05797Z","last_seen":"2026-05-22T17:22:58.364344Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9tLmdhbGFsYmV0MTA2MC5jb206NDQz\u0026hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=eqr15pe79bc","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b81cef68e6983b81f29f340876b5818c","sha1":"55d42004e1b900358d3ae15de018c42b9bde548e","sha256":"09d7d544c3fca555fe2d3fac429a16e89e712e99d9ecc586d39448f8099cfcfa","sha512":"422745489daf83820666465274e96add92b43d6223782a34eef831b8577045084b22fecb19f7dc5d422ca47de571bfc7735a5bcd9d005142d8d4b3f78023de9b","ssdeep":"","tlshash":"9270000c2c0c30000232b03020ab00080022880a0e820c00000000800cb2a0e2222aca","size":22,"data":"","first_seen":"2026-03-22T07:00:22.754914Z","last_seen":"2026-03-24T14:01:10.312064Z","times_seen":1525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9tLmdhbGFsYmV0MTA2MC5jb206NDQz\u0026hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=eqr15pe79bc","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ed3fe91ada91a4d87618038c97af30ca","sha1":"dc5611013eb1af260aea6bc0628a89c2efd093d1","sha256":"488104957e30e8e76ce49b4b70d3cfd61950225e46bfe1827a323ddcd8bf97a8","sha512":"958a4a80110efdd2f13a3100006bd3eba2c34c50b840b77df9bdb1fc5358486fef07cc5476188023bb4b849b4a6164958af3f1b951024b3af01c6b1f7da0fa8a","ssdeep":"","tlshash":"6a70000cac0c30000a32b02020cb000c00a2880e0e800820000000800cb280a2022ac8","size":22,"data":"","first_seen":"2026-03-22T07:00:22.749967Z","last_seen":"2026-03-24T14:01:10.312502Z","times_seen":1522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0beffdc96a1a1b35b5ce2759d6d1d51a","sha1":"8d9d42c92a1d18382b66ee353d3b81b8641ced00","sha256":"e27dcd41e84265874a28c43fa5780e5ddabc8cae4fa0d010d0ca18360e704389","sha512":"6c5f688f184fa65416108e0f6af9947e741b70ccce5053b318e8ed64858d9ccd6e6b2f905103bb3871e540ecfb7a85efb0503c539bb4545d6975c34aa58dc090","ssdeep":"","tlshash":"7f4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78849815afb6","size":2306,"data":"","first_seen":"2026-02-19T03:13:10.681687Z","last_seen":"2026-06-15T21:26:04.412918Z","times_seen":11137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-17T09:23:28.219812Z","times_seen":67167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/FavoriteGamesButton-dN714PS3.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"828fd99e3d19001747ec2f0eb0af7009","sha1":"9980992e4715518e0c1e6a9d58e120044aa98d8d","sha256":"8eb17858648977906214aba5e0a924408c6c9daad69bf84fe5b6c549fa318e99","sha512":"d7a8474a8d5683f9262a60c5e8b8351ff52259cc321589b25bb30cb4f76305944e0c30324adde0da9d905cbb90479a8762951556a4a397b5134efa6c770f9a0d","ssdeep":"","tlshash":"65e0ab4bd08de2fa2b832be06613c024282ea47ce75ce090409e286439b045bc91e96f","size":427,"data":"","first_seen":"2026-03-23T12:48:40.567392Z","last_seen":"2026-03-23T14:49:47.269894Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","size":1000,"data":"","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-17T09:23:28.082723Z","times_seen":50244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/tr/","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ab5194607d8db08f9abe85264322389","sha1":"105aa6a7c0d330d097cc7c9f6989d8223f23adf1","sha256":"3728c769109ca09c38155c787c6e13da31835fc34bfc842f7415f3d3eca691c2","sha512":"c48df33aa42a930e98ce83dcaf1dc59293d777ed22f746eb7ea8e299fe1622aec1f07ee914f18decfd1b998bcb691f84f58a5219a5e5ec1c230f9db6a331de8d","ssdeep":"","tlshash":"6ae0a31d1c1eb46227b419a8e237895530d5130529462655cb87d4543971cc554c6a4c","size":423,"data":"","first_seen":"2025-12-24T22:39:16.410899Z","last_seen":"2026-05-22T17:22:58.329852Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/LiveChatAdviser-DRHwJ7xf.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a1a971f5b00776cb6ff206810e32187","sha1":"75d578592961f4af63a58d575583c14ca11d524e","sha256":"d5d63d0a3f4b910753bc8e6f05608bec03288e4cb39caf2adfef1c80281d1806","sha512":"9f3998beceff8099a1ecc66b406836af08610d74da931fab1a3eda243be5b34e4d07e13f05089f84d9bbcbefd60e3e13dd29b3e03eac5d36347b24e730422c0c","ssdeep":"","tlshash":"a21112e5f0c6e3fe6767288dd76a2043700a4fa5c12d0db5807b19645a6ce1aa30eed4","size":862,"data":"","first_seen":"2026-03-23T12:48:40.385284Z","last_seen":"2026-03-23T14:49:47.306233Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/InternalDataspotTracking-DZHbA2K4.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11da725be76bb8886a2752d6941b21f1","sha1":"1925195191d9f09d4a24262941fe45c057e84196","sha256":"029d649b0851d1c6309944d56cb7b71e2f57780e1a2552d3aa05edafee2fb345","sha512":"025b0f87a0551e3d78d7fa354bdfc8514cacd7c6c1da2971a134a8f43b0ab30df1f8647379a3cd8fcc683abc459df8a4a3c9b802273764200310fb0919957586","ssdeep":"","tlshash":"6381961fdc3c08b0b060c6dc5837d566856c3c96a690dcb060378eaa661fe45d7f6e97","size":4012,"data":"","first_seen":"2026-03-23T12:48:40.283618Z","last_seen":"2026-03-23T14:49:47.233737Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameListItemBetBuilderIcon-qDulsDM7.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89d8dbf1d3cc9b6566bbd0b62a5b6a6b","sha1":"77f8f433e62ba027dcbf6abb63c8f4efba7dd1ae","sha256":"65c2589783ed99926c760b9332ed75a23b11bac653fac505d751bad36f6ae21a","sha512":"73d4402e4e6cb5706895a30e39dfb73327f58f45b28e43f2585bedeb20b7bf759b6c353ef57e8141b82124c8585ef234cd46d612a263872fa76599870e806647","ssdeep":"192:gbZq46rRejxWAdQTFBzwaYbnSEhogZ1yi3VAr7e:gb44KzjwhS03Sne","tlshash":"eff1d849e424aabe953a4ca9e47e8455301e2f48e66609e1d03f0e1b073c8d5736ff9e","size":8010,"data":"","first_seen":"2026-03-23T12:48:40.564139Z","last_seen":"2026-03-23T14:49:47.224628Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/QvLuXwupqtKCyjBw2xIzFLIf/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"acb7d4a922d9a5a1337aa1a24004e1e5","sha1":"9acc0b5a3519c24e1ce224563d475d5a744ec4f2","sha256":"95abb266a8ef0207ba8032e78ee565442c8a7998b9ce06dd72ae5efd77c54798","sha512":"d065a75987917ed45d3235ec749d25f797038d701c93970387a7e77f599fb936dacefdbad9af50e39436f9bd78b08fcfed405c5915ea1c6cdd8f699269dc64e7","ssdeep":"12288:oGRVW37Ok82oIqOHTTQueAQ4CpSen5fIcH6et7YIOl2:rgOksIqOzyAQ4CT5fFH3","tlshash":"4a053ad8f0c675b95332b4f52477100a637d891ac95c085eb2b885f13ab3d4960bbebb","size":863710,"data":"","first_seen":"2026-03-06T17:56:23.511704Z","last_seen":"2026-06-17T18:21:50.595333Z","times_seen":8661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8f033d3c7a50e4abe3d98ac65234d13","sha1":"caf431ea6dc8567be010d07f4f7d5798163821de","sha256":"7506c8f4d85e4707ab46f9858f0c6e65e3316b9d2f122dcf485b9dbf39d5a7ac","sha512":"ecad9d89ce602e5121c97135933a33122f0d9b32c15b43949d5fbe51fe576da069e9a416772117eb4666d8354b685046c0d7a3e086f669fffa488e2f05ff0ba3","ssdeep":"1536:iw46xylPIZSKcO355lcVU/SZ2DUdzI8bRj:PxYIvTlcVU/62mI8d","tlshash":"e173f8916a00f03776bb45ae65d1e7047ae99405fcb34894f42cc8804fe7d4f26b7aba","size":79991,"data":"","first_seen":"2026-03-20T09:57:21.567576Z","last_seen":"2026-08-06T03:45:53.052096Z","times_seen":2841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","size":5504,"data":"","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-17T09:23:28.221755Z","times_seen":42650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d894772cc8ebc08c554e305272fb743","sha1":"9630696cfb8fb02d834b6c2d590ebecc9e4c1971","sha256":"8822f04d16fcc6ebe390ead32df5d08238c7c383f466f401ebd9d235d32f434f","sha512":"20c22c322a8e6d0cee22113e4bdef0fd06e8b21ab65665bf648a3dcbe3857fad121cce2043bc46551247f2f88af76efcbc8f3ba5053a820439d0383342fa0728","ssdeep":"","tlshash":"5e511f3506b31521036b206c3babe316b23ad2433548f5457e9d93015f45f79d9b2bde","size":2492,"data":"","first_seen":"2026-02-24T14:23:51.4869Z","last_seen":"2026-06-03T04:20:32.028973Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GoogleAnalyticsTracking-CF5zzLSD.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5683e733aa3682e9a5655632822fa303","sha1":"766ade6586d7930de614c2d4e02c960751e181fd","sha256":"8bbb4c1a596f0ab41e2d7ae47e82704b8cac186cfa1f96061cce9e2e3faac14f","sha512":"5c816a9e6cf101a5cb167acab598d4ad85e4fd63f90bc45cd957be351e9b80ed4d1962cb0cc93deface1a3db13336adf9acacfb7a06d03a47416ef2167612379","ssdeep":"192:S4WYceR0SE+m/CTb3bHXCT76hoxGE0VK7D6L7kBNrnPWh52Lz2PM7mBE:WYcoE/CzCIEP3Byy2PdBE","tlshash":"1552b55c32adb0b682df6054587f720bf1755910a458f480a269edf46ef8caf026bf36","size":13704,"data":"","first_seen":"2026-03-23T12:48:40.639404Z","last_seen":"2026-03-23T14:49:47.253461Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/SportsGroup-C7izcyxQ.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"79fac26db46b0907efffc851ff44e3ae","sha1":"aadf0ca3b7d9fc982a52e43bb735030bde29d045","sha256":"290544e9385123db9565953347de6c991b1e966832c88900999057aef1f7bf9f","sha512":"cf849cc2dfb84e897ad3e17ec894ecf1f16f4e2504f91af38617e6440f66f881491edf66a268b8d782e54c0c7624e93d54ab3770017b3665b1b86e93a321665c","ssdeep":"","tlshash":"7bf04900e074ebbdd53b15c0529e0418305e0a78eaad09e3d0bd193aba780d57b0efdd","size":639,"data":"","first_seen":"2026-03-23T12:48:40.321924Z","last_seen":"2026-03-23T14:49:47.223386Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/loader/fasttrack-crm.js","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e62b669f80928b5dac9ece193256095","sha1":"a04e0c32df6e15dd5621258cdab16ca08361d27a","sha256":"cd306f0e4ea334dc0a9ab35e3e6c3c73a34876b8d8be27330916196042a1437d","sha512":"930f28be027cbe059bedfe820c6920d8668380c8aef844a15c140de8e907d2be6c5eb38470f0809709bf8d2d0cffd411c61a92a1fb1592503d59e24ff8350cc0","ssdeep":"192:/XKuPlMK5EbbbCUuUD7Z4ac2tMOx5YemndU25i5ObHwxaf6pedviiA:vKEiw8nbxDt4atx5Ye4ymr//A","tlshash":"e5e10e5c29f394610a93351f033be125f3b6e533221eec41b9dc8968af54667caa7d88","size":6791,"data":"","first_seen":"2026-02-12T21:09:52.600201Z","last_seen":"2026-04-14T09:08:05.84184Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79b4aa69d45c4b43f0b31fd971b1bbdd","sha1":"77122463966366aaa969b55f404af7903b9d8f86","sha256":"34b9a3ffbb7a87b04fe51abdb665588b82d1e5fba4cad27b6d6518228d20c2b5","sha512":"6bc666c4e89838ba9d62ccba15b642154cb69eb86ac22585e64e11eb0bca2ebc710c3c5cf8993a99aa85035e1ae44d566601f6b7649e7d92fa3d72a2f53f252f","ssdeep":"1536:BigMTWFu196wufn32jGDdgaOFUWbaGlDluK1MFY7dZPkx3u4V5pfYMrlSf:4nmuTilGhmPx3u4V5pPrlSf","tlshash":"36a3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","size":106023,"data":"","first_seen":"2026-02-19T03:13:10.618029Z","last_seen":"2026-06-15T21:26:04.428904Z","times_seen":8427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/lodash-DlcRXxN7.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c9fae07b3ba1bc6c4c6e4e73bacf0120","sha1":"d11c4e7feafd021ef09e6ce1e1be3be550d11a4d","sha256":"b8f71a0e9157d281426e3e5c2e5f625f80a7f37a0b2f59dd90d3b38458d45515","sha512":"af9974744dd31087f2d3d9d988f4f674f1e6babe839fcecb6d2f56a7908758a94ef3337e32f288f6ca45a4dba31338b81a6c1654d523c193dca8edd675a64d78","ssdeep":"3072:fBzcuEitffnucMUVDAGAmVgfVSVQovSin:fBzI6OcMUhLzVQoain","tlshash":"b2f390c835d7f4a183a7287440bf084bf23ead65a84cd150e1aae0dd7db8919c277e6d","size":164840,"data":"","first_seen":"2026-03-23T12:48:40.505282Z","last_seen":"2026-03-23T14:49:47.247772Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/tr-CR7kcqQk.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1edc25f8a599f65710b27e0e9e2f3234","sha1":"334509d520b19648232ac177437179777252f924","sha256":"73ea73130879463621f043f68c9f459ab830734fdc449a46447080f82195bbbc","sha512":"134a51681657a724e32c85efd8c8365e185e424f61ed25fbefa2cdfcf46d94c6f8f32152bf6954a2cf5df20000b0bd42d7fe9785e2c66d87998ba0b4db476fb6","ssdeep":"","tlshash":"aa31744d2946eab287016987c92f1f44f41d2b087136f1659ba4d461bab09ee807eb3e","size":1459,"data":"","first_seen":"2026-03-23T12:48:40.307741Z","last_seen":"2026-03-23T14:49:47.313611Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/WagmiConf-hdcVY1tR.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9a67fbe6ddd947fd589197dd4add431","sha1":"04e1f6a83784e34d0bfd065b449b7d75bd2f0f39","sha256":"537b74af8fee027461b3174e04db51ef96ed6c992747a6e5f1eeb2ecd57d9db4","sha512":"5188f717eced8a9b9ca6611d9532eca5062fbf928837056a7b7a9445761b46d53e00b377a3998addd43a28f642c986b24d82e87b55217d844f850dc3366fe9d5","ssdeep":"1536:42Caz30CdwD7ZajZlOxjMij4Yx6uxO7kaUhvFSEy7XUF3waG1RGYBsEUt0s5PIAT:pCaMRx5xO7TUqYEUZ5PTR1K/XGl","tlshash":"05a35ad07196b46103a74ae008bf440bf239ac35200e465cf269ecde79b96e99277f7d","size":100979,"data":"","first_seen":"2026-03-23T12:48:40.300203Z","last_seen":"2026-03-23T14:49:47.28359Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index-BSsAD_EX.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6e565ce5ef7192da940f1d78c6a6d629","sha1":"aeec0b71986d628fb53ee5148d6514b458e21487","sha256":"e4fcec6668b50243d7726ab1ef7c36ad3650ca34d57eafe3dd18f18a23a50dd6","sha512":"d30595a613672eab15d0b441135fcb635499d42c144554efbc3681b9ba5b67dafca809b8fc35e2c0143726683c80db261157db2fb9cf83306bf88f0bf4704a0d","ssdeep":"6144:BfeL9y0h4R78o8e4YsIALoh6wj9Sd51jjVvFaDIRcDGRD6On:BmJy0h4R78o8e4Yp/j9e5xaDIFROQ","tlshash":"4c240ac4b274b0a556e594d4502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","size":221144,"data":"","first_seen":"2026-03-23T12:48:40.281553Z","last_seen":"2026-03-23T14:49:47.231925Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/if-defined-CWaLTnLW.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","size":53241,"data":"","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-06-06T21:30:11.633829Z","times_seen":639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/FacebookTracking-Czru6uDh.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fe7ff2d864c029dc415410915ef7e5e","sha1":"ac059fb29eeac2986f9030aaf52baa70f3901edf","sha256":"5cc6e8abbed896255855c4b6d6f52ab386a616de578a4b37d99187e939bddb05","sha512":"86ce1010267cb7685f0d0e49013cabfbd0387a8c5189a38b4e1c21e599634cce6ed8b6e0dce666eefa88c792893b63c3b297b05d0b2df192dd8e85ebf85b3422","ssdeep":"","tlshash":"2601fe0f2c85b479167c18f8d3bbd81426ba590e258f45a5c6c78da9366454a408eb8d","size":680,"data":"","first_seen":"2026-03-23T12:48:40.359932Z","last_seen":"2026-03-23T14:49:47.318757Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameSuggestedEventsWidget-BEY5dQnO.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7345bbac091298f9e04a68c920846d30","sha1":"631bc084ff5ed3cf5771f38595bf4f0b89d1407d","sha256":"724cda46a4ecd30ae32f11cd4e6f3c0fcd3f2b5fbbc5bce5437de267a32f2b69","sha512":"aeebffceb93928dd362c7378214166d6bdd21f3fdbf3c6831d9c605ad11da45da39b8a9d28828db260586a8127f2fc802cdf73080a4e010e0bb91797152dfffb","ssdeep":"","tlshash":"e371d74ad010aa39a16345e81bdf3219103672b4b54353c1b63fca3127e5592ab5fbdf","size":3726,"data":"","first_seen":"2026-03-23T12:48:40.482802Z","last_seen":"2026-03-23T14:49:47.314658Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/InformativeWidget-CTNuPyrc.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f8c7740c95695c15fc163b6ce90fc0d","sha1":"369b1bbc5cb604484f9bc711d2e0b33a84a5fe62","sha256":"91ff9c46723bfdc16f53b4c7b8dd15a82613474071904a37a3a47641b2d4737d","sha512":"f54194bff15e5f8340526c84b7ec90fb347a426fdebcc4b85b7e8b967818376b0ae2159ecc42416a6fe33954a28d4d5965b1e0d0e01891ef07ffeeb1913d81be","ssdeep":"","tlshash":"64116581e695d63ef03604cc4716505465226ed8df38d8fd48773008d4b4d0ebaeafad","size":1021,"data":"","first_seen":"2026-03-23T12:48:40.543722Z","last_seen":"2026-03-23T14:49:47.213055Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/bookingBet-B87_JLwQ.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"99ccc64e7da561b23a46c92988276a6d","sha1":"9cb398b846e5aa2c20253c60f58b75bb9a95691d","sha256":"3d0ccb8881488de289b90a7e06f79e8c0fd389022563fa5edf92318345a60d4d","sha512":"6af695ba69344b56a71cd4de31d4fbbff2e6072c4c78d1db246740a8ea2390e4847a6198730ed7c1073c8a1d330b4cfdfec98dcb2c70da0846934dc97841fd20","ssdeep":"","tlshash":"3271e855fc5090baa7f2357df19e7b42772c6be871a19b409f6b8d0c40d084bb534a2c","size":3796,"data":"","first_seen":"2026-03-23T12:48:40.620277Z","last_seen":"2026-03-23T14:49:47.327153Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","size":10938,"data":"","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-06-15T21:26:04.407385Z","times_seen":26443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/tr/","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3166d5139ebca4976a7df164026ff20d","sha1":"d7405b66cf00d1db4dc3140d6b1c63bca60fe4a0","sha256":"b297727d234af0837389b8bcaa1e72f4d0b62cfc126a4b9bb76201c5a52755ad","sha512":"ae0db71fd045eb0b103fd15902be9eb9a72763fc8494c7eec08ec13288bb0a46f320674f46a6467ba33f3869d3c388f15a83342bbf86aa38ef1810ed930d046c","ssdeep":"","tlshash":"4390024d71877261454126ed546a1016d3354480561c0113a7010081389814e42a5b8e","size":52,"data":"","first_seen":"2025-08-01T02:35:18.735752Z","last_seen":"2026-07-06T22:32:47.104782Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e63i0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"47e1479e139cf8ffe365727ad4529edb","sha1":"9e80d301bd991e8b711d7662f4f55815e8024d1b","sha256":"ab356b8f9a1c2fca52ff4a44d57c1c861460f36251166466ebad94817e8bd7c3","sha512":"3bb840601b4cc2a0f23f368d86e51f946f166ea14ab2077b62c34b5bd538099c69570f419c0df296a4a8644538c8757f9e9e4d8a6558db4c79e08e5253a0a068","ssdeep":"6144:VjJ8B4fKAfICc93KwiKHnm8SBtS5K2wzO3Qpan8Gv/UywU2yIS+p:Q4RfICAbHm8eeBUX","tlshash":"2fa4f9ceb3da70265396f478903f018ba57b28a2b45cc899f189cce42d7465a4277f7c","size":465712,"data":"","first_seen":"2026-03-23T12:48:40.588634Z","last_seen":"2026-03-23T14:35:26.130824Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/BetslipControls-CFIpu0aj.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ec1072f9a12fcac9b2e9d92617d69c4a","sha1":"2fdfc99c7fe14700a979115358d62a6879e77b59","sha256":"37f7abf56bc85834e112cf6f31961feede3881cbf371566eaf240eee01a947dd","sha512":"3fe5ab928d9f18f3bae79c67756fa93c9c850864a015ac1a0d86dfb00612e684dc9f6f021e5430f78b4f7a8660bf711f98fab8ed83ebdaeefe3d1334419006c2","ssdeep":"","tlshash":"8f816997e403dbbcca25998dc60ec2d424a5175cfa2614c2d07f18a40bdc869b55eb7f","size":4095,"data":"","first_seen":"2026-03-23T12:48:40.599574Z","last_seen":"2026-03-23T14:49:47.316845Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/tr/","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"25968e8050b03a228b4d547826b098c6","sha1":"b15ac3dce03be69ab8e198afebaf9cf761cf9da4","sha256":"583e20359cfc6a64154b601fc47309be1e57fc2b89434d8a7649445fc66af0fd","sha512":"d2256261787b021c3ef34b69e3509640f04abd03353b7dbea1d8f07211764770e8b0a4a1ea015475e3c326d1fc797d8191b87834550309076754f8b1213dcab0","ssdeep":"","tlshash":"89e0f1e77817486a749f01bd6bb5902431832119640dc922fcfdd4241f60693cc0e88c","size":435,"data":"","first_seen":"2025-12-24T22:39:16.413128Z","last_seen":"2026-07-06T22:32:47.109477Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/Firebase-BTwtX3BB.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf92d3d16e4d2bdbf3e65f816bb67692","sha1":"f87afc1108f6d9b9f16f022bbe0673aac305d724","sha256":"3264e5d305a442ebe38a7992924901527933aa2a372f8d317397055c34849a75","sha512":"9cf7a779eaf4da3780592548b78a62dbf16da0b40c22402fa6f68b5eb7b0d684e7651a49258a4aad9557577ae4c36455d6c90ebfcbc0f502e9da799b2da596f8","ssdeep":"1536:Y4B1ZtLG0w0MlRdcuwMU51uxIZOLphF4yslNmuICMmWJRvebilqVotWL8Avw+u7h:Ys1ZtLG0w0MlRdcuwMU51uxIZOLzF4yv","tlshash":"c983957d7a922a3317d189ab792f50cbb319c64d390f8394741ec0e91e3e45a45faeb0","size":84095,"data":"","first_seen":"2026-03-23T12:48:40.285347Z","last_seen":"2026-03-23T14:49:47.185524Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameListItem-zeZgtcab.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dc97c09e995083be87af3872add9861c","sha1":"943e5e82263a837692a9878f865227fcdea6e3d8","sha256":"18d0193b1fdca2b031f0cff8e09dd0a040c8c0b2fe03462afce8bd705aa075fb","sha512":"c201fe72b9f04a451e4e0a4cb91166e365a3ca89e78a23b91f534cbeacb8a28605bcc347d9f2a5bb0e06e5a736da71090147384c6e2cd445b368b67ba27749c2","ssdeep":"96:u42XMSLe0MMmodDlA972VYtpq8NoYzumJrOE:7epaqg972hooYimj","tlshash":"df917549e024a738f8379efe71699719f1310e8e875b4bd2e15e43690391390632bf97","size":4485,"data":"","first_seen":"2026-03-23T12:48:40.609039Z","last_seen":"2026-03-23T14:49:47.240149Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/68a472fefcd547192dde9e22/1jj9jjq2k","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10e17b84cdb7a53a99181bbb1477e35a","sha1":"8e68153d6049623cec9ec016f75b13ea9672ad6b","sha256":"46aafa5f4fbb31707e2590f520353250cd1775d28cd9af4fed3a18fc017a7185","sha512":"fd3fb9d1df530cb284e5986347bdd659a006d65b9c7414339de9766e8d4c3924088ccdaf2ebf90df098f4e20c68d8fe5e98d9b377e64863e97a777cb3b8cc648","ssdeep":"","tlshash":"a641ddea5b4f1c56b22410d90ebef90ef47720f745da5892970c085272757ad2f8de38","size":2123,"data":"","first_seen":"2026-03-23T12:48:40.320296Z","last_seen":"2026-03-23T14:49:47.189664Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/useOpenLiveChat-pArnJzqU.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7aa7af1f7b4e2ef91a95308f8c9c4876","sha1":"c992e0e4463ee0dbae8d7c72cd5769f41442b8b5","sha256":"5b1af5bbed06289063c70708480c81c34d05edae84688fa4ba64816c518ebd7b","sha512":"c5d0f1425c8256b8d38bbe058383da45d7733cb78fd8c8b73800c2011fced22a38a269177d8789c139ba760f07e98f944f9e2f85fdcbe37e663b6f0ba7e7828e","ssdeep":"","tlshash":"e0f0e1cb4598ae7c80c08ed0615fa5f46b3807d4700d8501a47a7cda586490586ba887","size":583,"data":"","first_seen":"2026-03-23T12:48:40.344198Z","last_seen":"2026-03-23T14:49:47.316272Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/19330347/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","size":35,"data":"","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-08-14T23:08:32.174928Z","times_seen":28118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ac4b41bfa3079e73da08ba512cca2e3","sha1":"28236a6e21a500f8eb1fc0804ed1553f4b7fdcae","sha256":"b6ca684b4ef298f79d931ea40f8c3b597bd7e8d892a21e7cfc756cb3215792eb","sha512":"8fc4f8a4242748771f8a9220744ad1a1b501fa381ccbea978dc7062afee4c8788f2ad79a74572020146ce13610abcdba43f005cc36a2a455eb2d6a226a689f24","ssdeep":"384:UJw/U5YK8Hx9KJsThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJsThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"9052c6a7b2a4782d42379712308f3205f33b7d45b215da19f36edcea4aa84c16056f3e","size":14213,"data":"","first_seen":"2026-02-19T03:13:10.683375Z","last_seen":"2026-06-15T21:26:04.416628Z","times_seen":7904,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f76cb77e2da672d4d297c1e83a089b0","sha1":"f04be003d238ec86ab41812fc3ef69a976f064a2","sha256":"bc714cbb70826372337fcdd44aa95fc908f417f19fbac877d37868de7f139d18","sha512":"edc5f0158f9c189b466527c58b89a115f1edff7d7ea2f219566765f0ef10eeb71e2ff6dc1f0a95e6bd0ef7747abdbc61f583c8275a84fb1b34eabf1ec8a694ab","ssdeep":"","tlshash":"dee0269d29807d21a25396a716f2de4c38e63024a555d951a99f880c2a28999c92cf58","size":334,"data":"","first_seen":"2026-03-23T12:48:40.672678Z","last_seen":"2026-03-23T14:49:47.376419Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/68a472fefcd547192dde9e22/1jj9jjq2k","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10e17b84cdb7a53a99181bbb1477e35a","sha1":"8e68153d6049623cec9ec016f75b13ea9672ad6b","sha256":"46aafa5f4fbb31707e2590f520353250cd1775d28cd9af4fed3a18fc017a7185","sha512":"fd3fb9d1df530cb284e5986347bdd659a006d65b9c7414339de9766e8d4c3924088ccdaf2ebf90df098f4e20c68d8fe5e98d9b377e64863e97a777cb3b8cc648","ssdeep":"","tlshash":"a641ddea5b4f1c56b22410d90ebef90ef47720f745da5892970c085272757ad2f8de38","size":2123,"data":"","first_seen":"2026-03-23T12:48:40.320296Z","last_seen":"2026-03-23T14:49:47.189664Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/FastTrackTracking-DJnY4OPd.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0915e69e82695aa707c7c93022895186","sha1":"48a210838f20bbde6361861f9e3ff75a32f6db4d","sha256":"ee63c8cdad4e59e8694a37703ef249d15d335f2b3ff85e6b57e5ebf9589216f8","sha512":"41c107835a27bb9edfb8df09fcb2829bcb03b6651a7ef77365cc721c482b91119bfb684111e7e33f1556913aaffb3d072f5706c6c2636b603309daaf5b00671a","ssdeep":"","tlshash":"f221534e40e443a47c804e8de3d7a261953d5876711ec4e1b07b0bae3f0ca6a839ac9b","size":1322,"data":"","first_seen":"2026-03-23T12:48:40.383753Z","last_seen":"2026-03-23T14:49:47.198422Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19330347\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fm.galalbet1060.com%2Ftr%2F\u0026group_id=0\u0026channel_type=code\u0026jsonp=__ovdiue913da","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.100.107.156","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a688709d830ba6774475b2b898ca2c1d","sha1":"fd6e182d5859bfb1711574e056753e3093bc04eb","sha256":"eab6ca54ad541c3c3f20abc5a226433576787c02983b1c0d0e75483bb3f700bd","sha512":"cea444a1459e76d31cba4be17ee43a828d7c05e420ebed06edd763964c37cfc307cffd6af91e2c28e30da58e15dd2c73450c91ff106d28bb44a1600fa777868a","ssdeep":"","tlshash":"98e06aa3a25061b0d7c8e3be80005b023d300fd7400096bc747b0300031f7de7324407","size":391,"data":"","first_seen":"2026-03-23T14:35:26.067574Z","last_seen":"2026-03-23T14:35:26.067574Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","size":324696,"data":"","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-06-15T21:26:04.431869Z","times_seen":12669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/SystemBetCalculatorContainer-8g_IRTCb.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"793b2b593bdfe7faac33dbea7112d2d1","sha1":"54bd686e66f906771f84d328897ae0fc7d2774b8","sha256":"02a74cc12ffddc9342f181c1656777b44f817ae0dd24c949bbbf07c9c4145dbb","sha512":"37de5bd8a70c48e399a03ba2080ad9c3d1ee419cfee4cd5aa156b2d0accfc4479bb173b3cab98174be70e93b33b59cf27ee4a5cf009dd72b797c7d5a19d58eb1","ssdeep":"","tlshash":"8411dca223a4ce75c48d0fb6099560941eb5030a690cf63875b28c3cf41549687afffb","size":940,"data":"","first_seen":"2026-03-23T12:48:40.316181Z","last_seen":"2026-03-23T14:49:47.182289Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/Notifications-Dn5RLrQT.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2c303a0fc4982d1fdc4e77cfe6639709","sha1":"130b81f23192f84e0f1703205599ae45334e8526","sha256":"307da9acc2f5b0389ed49579106722ca9f703fcacf8913ab3cc7b5cb25a86a6c","sha512":"6ae2b52ce3644fb6c7a7115468c49ac9afa193c60e76235e1fd4bd05850c4ec742aa287ae153994369fabbf812f84372b30d73a9b0a7747f7f7c3d1b7ae02e04","ssdeep":"","tlshash":"0d2130df64869afc292144f5431b2a32703708187529456602fb1d2032ad70ad61fecd","size":1112,"data":"","first_seen":"2026-03-23T12:48:40.325745Z","last_seen":"2026-03-23T14:49:47.214021Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/MarketSlider-D0nv4XTi.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"09da9036327329f84ccd4c750927a23f","sha1":"3626aa33527ee2fc51720bae40e6b72a45a03d8f","sha256":"0d7f86a1e7714aa2cd58d708d642629d5f4ae5fe211ffa66f3891063aab648df","sha512":"f9d91e4c9ad1f0a15b86faaf465e65767e017306b11a1533c3bb11dc2f9a1c64c97a0be78e63fb5a913e15becf52f93f03f9826b07dab85a2dc10a9d226b04d8","ssdeep":"","tlshash":"8b8185c8c039cc6431658cdea5372f13e6743a739bb181d3b0660daa4754209db7eeb6","size":4091,"data":"","first_seen":"2026-03-23T12:48:40.346009Z","last_seen":"2026-03-23T14:49:47.202515Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/TabItem-Bt7y7Ru4.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"634c884b7b825dda5f04f0a154c533e1","sha1":"e57e003b3b1e5f9b4bd7c7d0757a0329268841d0","sha256":"1720ff6d4b0b072f9b8d1a5e3b5e08a66266c86a3fbfebf06c49e4723c4226f7","sha512":"55e8fa1efa35ae3be2b40ac471f8cc6914f4eaddf6191ab97757eab3c6bff160346202ac2599e73edbcc1862bd52c5c42f148ec3755408ab29bc1bd9b7c6d038","ssdeep":"","tlshash":"66e02b42a020f3f5992b54d6d26e94c7322609dcda5988e6a1a32441076e521f74ff8e","size":413,"data":"","first_seen":"2026-03-23T12:48:40.425028Z","last_seen":"2026-03-23T14:49:47.255752Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/wc/rewards-main.umd.cjs?v=492854","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8aa892732850a447c954b9adf0429164","sha1":"c073b4a6853ffdac2814363470f440edd8a3693b","sha256":"4d8c414e135ea161c5bb067b86a21abe9c90ae468228303e8bdde911afc496e4","sha512":"429cbbdb90ee95369e39014f961faf3a3a3d452348ed7bc569416004c3354b49aaafb9d5346f1fd614324f2ae3e49ec785fce848065ede68d42a4ecc11820d6d","ssdeep":"24576:blh9atcN1lhT6Pcgr9ojYVCcCLrLZSObZ5uYeiolhaLx7hOdFakK9ND:blTatcN1lF6Pcgr9ojYVZCLrLZZuYeiz","tlshash":"70257d9072567534c3b795b260be0508723c5b03740ac5a8f2bc99a92fd7c9a627bf7c","size":994310,"data":"","first_seen":"2026-03-23T13:26:58.857916Z","last_seen":"2026-03-23T14:49:47.298786Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/RemoveAll-CD8tPEh7.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fdadfd89d55f9ed03705335de73ec6df","sha1":"4193c848914c623a740f6fe6be7799db40781563","sha256":"24a17f4331e40b4cc190c141a264599e52fdc735fcee673d05bd5c52e309a041","sha512":"328864072a1239c652b75ff30141804f9e4068ffd36a854dd0a0c9992a98d176643c713e5edd7219ca990f9973624c77095cbb86c91695028743b3ea1cb9ae1d","ssdeep":"","tlshash":"b5e04f8da051bebaa9a52ace6e38800670150d6ce739019090fb58546ea85ae721a6a5","size":329,"data":"","first_seen":"2026-03-23T12:48:40.568762Z","last_seen":"2026-03-23T14:49:47.196673Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/470/941088.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/470/941088.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Jun 2022 10:55:59 GMT\r\netag: \"62b98cbf-9a3\"\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=DdX7doqPibfQr6Iwgyo7emHVonDSWHKz9AEW1rggAwY-1774276472.9806995-1.0.1.1-Go9I.3Y.TcFCFyBv6IODioUuTz43ubacuZdlk5_eLTosUrG9_oMTMjvCV847_HoR8_cF08xn6jrkLCZ6tJMGmCYxt3E6KJu425dvCxvHKy2fLTSNm84zMDWgE3XNMnPV; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2BkBuWQoZpISNOtAezbcqC02WBaYyDr6ujQf6kvKWqYzmuXsUFmRTxy6w%2BQ2RGxhtJsogjOf5zz2fa6Ngr6USjSWvC%2BeXHuiQhD%2FcZFm4vIHxs7wAz594SJxDxw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28541aaa0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"87af8083716421c45adf7b89c550fd95","sha1":"2eede979dce324b9cd8c9e45a4f1d89e27c74716","sha256":"a748f909eba7de62cc2b5325d56fd19af99dde087b3e64d9b759771f9667a356","sha512":"d28a590f64e63a3c78c08af9e4a0ea4655978ac7d5f327c10664f2bbec15013c80b735f97abe45164945e1d95a9a611dc3cd71ff084450c4c554ec3f72e81d07","ssdeep":"","tlshash":"47512c2db451c5b1b0ad894534db503397230cc5eddca7a5ec4e642a0d2ccd9609dbcb","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-08-10T09:12:16.484033Z","times_seen":221,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index.es-BOQ4Bx4Q.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/index.es-BOQ4Bx4Q.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/WagmiConf-hdcVY1tR.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470171; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 82064\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=onEfBCPdbLfx7SrVASSp057Bd2hQgT353AUe5JSqt6v3j%2BdjmLQB33%2BSc3AachnEh3MeRlS7mmfqfyE5RvNkyZMIcmTHCL8x3F18mo2m%2FQSogw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2842ee602f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":295236,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49514)","md5":"cef3ca896e60f2745af080791e263ffc","sha1":"7da2625efcc1ecb9d44f256d13e9307101ea41af","sha256":"8197508dce56a9911e9ff0721426430a6835dd62468d5622f37ae597568d03cd","sha512":"48c3f764e5db85303d4b2bf0105a9eb94c60b19867e3541f96788833a17ae1f1ce95f82dfe35e3faafb6af89de5c474b2ee6588041ba8a9f02565f8b13107ef5","ssdeep":"3072:nzCw7+KZdQZv/7VXKAMJtSu7vYK9u6INz8P1jXJphlzfl8FnN1Nd6U8h:nz77jdU/7sJJMcvYisoljSFN1Nd6U8h","tlshash":"4554fa8472a7f47543d665a8943b1542f23a5c64700c902cf6acfceebdac4499a3bf78","first_seen":"2026-03-23T12:48:40.552221Z","last_seen":"2026-03-23T14:49:47.248342Z","times_seen":3,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/Notifications.4YD1Ldex.css","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/Notifications.4YD1Ldex.css HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/tr/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470775; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 42\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:38 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5AFwfwyhNh8ITjF950Cl1cZs2Tdhs0%2Fk%2BFJvIl9J3u07kSi3oHEgpAer3xzRpROAdhEcEzIdzKSX4jPRwTgc9uHSfdyCfxs%2FGGsBrHI7oB3I8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28470ac22f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a84d03aa0e4c29b941ffd9b99044227c","sha1":"fb904cdd18d8bd1528967e5294579144896c0e2c","sha256":"80b5ae12e0eedb3d97d894297c05b2e62671e47d6889a2f4596e817d0246cb6c","sha512":"16edb86c710d17c07400df8df18cda1591e64e3c9d5aead59d1182669ba48fedff014be44b35b9cca88fa15c3f94ae855bd064280106c20951b626f3aaf2186b","ssdeep":"","tlshash":"c49004570517d0d4f551405300d11c50d4d744cd0dd51151c7c1dc1d50c010cdd31dcd","first_seen":"2026-01-10T12:08:16.414391Z","last_seen":"2026-08-16T22:24:37.375293Z","times_seen":556,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?render=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"30:09:A8:2B:50:A3:5C:0E:2F:11:01:80:FC:9D:20:3D:1E:0E:65:96","sha256":"A4:2D:7A:76:57:2B:43:3A:8F:A0:D3:F3:1E:A4:E0:04:33:BD:AD:1F:12:67:F2:9C:D8:4B:7D:42:6A:6A:FA:35"}}},"request":{"raw":"GET /recaptcha/api.js?render=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Mon, 23 Mar 2026 14:34:31 GMT\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1054,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1054), with no line terminators","md5":"ce88bca3326c253fe88e426ff5c1cfda","sha1":"62d18069c4e2aabe5bdc678eaffcc0c26385a423","sha256":"8911bb2859870bf8a6e48f94c22cadee37354d536c10effcb969bbf0d7ed4191","sha512":"3e3801f43d16f6783cf5cf729ece5054a5978bd7ea96f8b0a11fb95ae33da5f2aa43dbd62ad5650457216453af52ed7dabbd7e61020cfba43d99ba22e31af291","ssdeep":"","tlshash":"011135b31614a0350b3219e1e1ffdbb8e452701cf15885d8e551eac82f7dcc7ce15544","first_seen":"2026-03-12T12:59:10.973708Z","last_seen":"2026-03-23T14:35:26.040237Z","times_seen":2,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":127,"dns":16,"connect":8,"send":0,"wait":21,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1688\r\ncf-ray: 9e0e2849cc9ae9c1-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6410\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEA-Bw7H9k1gZltgcL-Suew9FfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=690+4 c=0+4 v=2024.10.6 l=1688 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bffc4df749e3b8f1d0890df22f4bc77","sha1":"ec3033a449dcff239808409c5d96d388a661ea37","sha256":"c7cc404018e711a83cdb04a08a5c5a12f54d1612b3d3cef12a0b7721fccd4465","sha512":"0ef53d6b15c58647ec9f81e562dbda560cd9f6287abf9d07b5e791db37b97879aa57c86637f7213ff127d4d10e4b8528ffc5368e085d8179d18524a4d506a649","ssdeep":"","tlshash":"cb311a52b99510c943825527eff4cd41971398270f3c61734161247349694b22df02d4","first_seen":"2025-01-28T05:59:32.01912Z","last_seen":"2026-08-14T13:55:52.2213Z","times_seen":1653,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/798.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/798.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 822\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:32:37 GMT\r\netag: \"6d199c6f5ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 09:06:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 106093\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=bf_o4M5ZMtvftuvpeXVSCp7gn.YxriOameJOrTaP5CA-1774276471.880111-1.0.1.1-3uLv3ZtTm5vzILCaJQCEDSELzqdALOYYSNsUwuEcfNDtTyiiW4XZh_xSLVlJafUgWD1smQOOQT9MSnJ94elZvKYnXzQ2Go6UVUnrlyOnRvnPnsGPt4UnvgsaDng.6QAj; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j7apZzIL%2FvEIOyq2Eqjvle%2F%2BJujdICgIV99bYzQrWrL85iqgQv3kxHvwt5KbXlTt2PSFKFq2MupM%2B3aK0RzpYM8De6b0xkmtWRrrTCBI21qMj3THw2Ug4Tib5Eo%3D\"}]}\r\ncf-ray: 9e0e284d38772efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":822,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"e09790ab358c277e9cea7dbdedacf7fb","sha1":"b846036bf75244dc091dc43b5179fa7399ed6db5","sha256":"b7151afc783e6645a69f31f0d6e65d5f0e61990e81ed7192bd20b38cbf7a10fc","sha512":"c7075af8c6c97d4cdca6b67e0bdd9e5d88fe68611af8d5d76e892787e3e1a4fd33e9cbc2d727ab195f257553c8e382cbf0165a18338c663e5b9cc195a4829c44","ssdeep":"","tlshash":"e00156d3ecc87954e92982b95b11632845fbd27a641e114832d05810625f497008b26a","first_seen":"2023-11-20T22:12:28Z","last_seen":"2026-06-03T19:17:53.433375Z","times_seen":184,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.galalbet1060.com/configs/d212f7f1f16e55d50593214ba05a0f99.js","fqdn":"dataspot-bucket.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.873Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /configs/d212f7f1f16e55d50593214ba05a0f99.js HTTP/1.1\r\nHost: dataspot-bucket.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T09:43:02.208337Z","times_seen":17933663,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/358/716256.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/358/716256.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Jun 2022 10:55:59 GMT\r\netag: \"62b98cbf-9a3\"\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=Q8NwqNxW_i3vrW0jtFOXg.ZMMv2tIvpQPQ9to2FyD5U-1774276473.0238883-1.0.1.1-wtwTckpd28aXnCo55f7mEYwXN._CXW2kCaO4n0ACF4yyFyr95rtDuLhLxiaybc5cqh_IDbTGfmqeEbZR_hO89C5e.yO1xuDq_Mixujxq1Nfkr3w.CWn1EAALK8gxOddg; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VXIddBdU2E828xZQ5oYLUezaDQgaFHh3bBlqv0gu%2BAiPp4l0qBbse7XnB%2B4Uue9raqCHsUeLdZ7ZRn1xeFu4bLC0AjHY5VicqVSeoe74hrOJ1jux7MiAUdHzupQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28546c590883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"87af8083716421c45adf7b89c550fd95","sha1":"2eede979dce324b9cd8c9e45a4f1d89e27c74716","sha256":"a748f909eba7de62cc2b5325d56fd19af99dde087b3e64d9b759771f9667a356","sha512":"d28a590f64e63a3c78c08af9e4a0ea4655978ac7d5f327c10664f2bbec15013c80b735f97abe45164945e1d95a9a611dc3cd71ff084450c4c554ec3f72e81d07","ssdeep":"","tlshash":"47512c2db451c5b1b0ad894534db503397230cc5eddca7a5ec4e642a0d2ccd9609dbcb","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-08-10T09:12:16.484033Z","times_seen":221,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/branding-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/branding-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: \"fe979c92a5ad992510e5629b84a23526\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 469190\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e28563eb275a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19329,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19281)","md5":"fe979c92a5ad992510e5629b84a23526","sha1":"4fee6cd9de53fa82feef4042aa83202f4cd194a5","sha256":"de84306c96c98314e1a796f26df99a70f20590c535a678215d89560007b4dacf","sha512":"633913cef35247da29e85dde7c279353761606e6c508690d4d5924aa89f563354e44c51b053f785800fd3b599feb8fd2d69a2fe55162b4ccab95c84f8ed8739d","ssdeep":"192:XeI2u2acuBLZNgxYe4fbfYLFFDw25lYVRgtUramxi71NZcFRKV7:uTTacuVZNgxYe4fbgL3w23U3xi7vD1","tlshash":"af92dca3b9e310dcd557c632c0d1f67ca82f9a24c357c6e3a9037bb986827d7264198c","first_seen":"2025-05-21T12:18:34.239407Z","last_seen":"2026-08-17T09:23:28.271554Z","times_seen":39305,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QV%2F11jnvP15unZcOwr6wSV%2FGAprTncd7aNcM2tDn4wOSY4LmOpuyyCWR38gzE%2FfvFOFrNrsZ%2BKViznJB%2BnvyMKSZqOvX1fHXcz%2BC0DJGnl8udA9qeP4%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e0e28445bce48d0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2821,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ed84599d293d187c97aa6f88754332ce","sha1":"f950f5294b5fa13bd1c3950e5cb28b1a2ee241fc","sha256":"599500c94c302ac02594dd87a6652eb51a9f45042f0fc5fc2bd2f3935f8fab81","sha512":"d94fbe4938b707b2595582d942cfd27ada4874b5be459851f77dc5371f705af81eada3ddc170697813c2657a8404f1303b8777279f716eef4ebe08fdce284cd7","ssdeep":"","tlshash":"71514f3646b21421436710683babf31ab23ad2433689e9447edd93005f85f68d9b3bde","first_seen":"2026-02-24T14:23:51.260409Z","last_seen":"2026-07-16T16:07:12.935859Z","times_seen":64,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":36,"dns":1,"connect":8,"send":0,"wait":54,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/jackpot-DGmLRtK4.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/jackpot-DGmLRtK4.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/JackpotPoolsWidgetContainer-GF_Y9WrY.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471612; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 244\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6413\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NEUq2vDe9WdGXpXli5XzlU3hM3dpoOf57g5LtbA1tyVp2v3wTW6ng1V4UgOp85ayjD35KJwhdXSGP%2BPdt3yUbQmlTMEfLUjluem1SIk2OtN06Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284cacfd2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":382,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (381)","md5":"564ff0363c26b2c1174cd143918febcb","sha1":"b816337fd7dda0ec9984344f8cba0b8c5164f388","sha256":"082d8826ce562cea90beb4d7ff16faff0b692b121e16518b70b87005d7b94d89","sha512":"60a7ca097270eab028868ef316969a2975d4b142b6bcf6f8b87a5fb7f4f553ac7a11abde4496a2fca1e91dd9a8f0a09b2d75a5ce7ee7bd31e5ec858757ab86d0","ssdeep":"","tlshash":"efe068de99c04eff91b0071a2ab5088809241a86100f94f87f7632722406bc828f8a38","first_seen":"2025-11-14T23:47:17.853619Z","last_seen":"2026-03-29T05:41:25.923222Z","times_seen":9,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameSuggestedEventsWidget.B3VqF5zK.css","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GameSuggestedEventsWidget.B3VqF5zK.css HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470271; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 133\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:38 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uHYpp8QzHJbexyBTmjJKpCaU%2BIZpnkwnAKyxO%2F0llRSIcbtP92ETLfoQx7h5ztc%2B58ExxZcc4Q%2BbdphHgcC7FVFtrlxQcHfWAYhpJRVceE2AdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2843f99b2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":494,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (493)","md5":"3d3f0fe9e1a11530bcc5b93d9a483aa6","sha1":"5f6ec492c5fdf825ded4910f380466bb23a50332","sha256":"bee73c23ba614c70cddd4a90715357b4e5247e83db72e74289f80e59f6349fc9","sha512":"3fe221c3be766eda2e1f32ce4d86509e3766421cde94b5098cce1e9a4dd253c550901190f197e517d10e96322ac66e357e727e78382480d92bad2d1efd53d670","ssdeep":"","tlshash":"a0f0e9218f34ed35a4ac03ed2a77005a5760e195bc5039f86fe1bf158a087e61ce82cf","first_seen":"2025-08-13T22:32:23.57413Z","last_seen":"2026-04-29T13:47:02.73876Z","times_seen":41,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/FacebookTracking-Czru6uDh.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/FacebookTracking-Czru6uDh.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470575; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 371\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5MtVprGqia4oO3WTpiXgiQInmJhn7In5sykLrk3v1QgpZnE6ugV6Av6GZMULK96tktPwV18ALdIiJcWUF9mig%2BaogVEIibR8JvqKOCPnbmZqOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28456e492f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":680,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (679)","md5":"5fe7ff2d864c029dc415410915ef7e5e","sha1":"ac059fb29eeac2986f9030aaf52baa70f3901edf","sha256":"5cc6e8abbed896255855c4b6d6f52ab386a616de578a4b37d99187e939bddb05","sha512":"86ce1010267cb7685f0d0e49013cabfbd0387a8c5189a38b4e1c21e599634cce6ed8b6e0dce666eefa88c792893b63c3b297b05d0b2df192dd8e85ebf85b3422","ssdeep":"","tlshash":"2601fe0f2c85b479167c18f8d3bbd81426ba590e258f45a5c6c78da9366454a408eb8d","first_seen":"2026-03-23T12:48:40.359932Z","last_seen":"2026-03-23T14:49:47.318757Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/SportsGroup-C7izcyxQ.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/SportsGroup-C7izcyxQ.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/PopularMatches-DWx3UOYn.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471318; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 344\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b2pLxMIyBZGhXN68v7hySPDMWGmQBoCGAVx208GYgaekp1YkGcJ3Q6pI4%2FxSVezbKqgRDB33GwVYhcfIHBAHb1cP6pMn8J%2Fx0Kn2NvGZUNGIDQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2849ebbc2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":639,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (638)","md5":"79fac26db46b0907efffc851ff44e3ae","sha1":"aadf0ca3b7d9fc982a52e43bb735030bde29d045","sha256":"290544e9385123db9565953347de6c991b1e966832c88900999057aef1f7bf9f","sha512":"cf849cc2dfb84e897ad3e17ec894ecf1f16f4e2504f91af38617e6440f66f881491edf66a268b8d782e54c0c7624e93d54ab3770017b3665b1b86e93a321665c","ssdeep":"","tlshash":"7bf04900e074ebbdd53b15c0529e0418305e0a78eaad09e3d0bd193aba780d57b0efdd","first_seen":"2026-03-23T12:48:40.321924Z","last_seen":"2026-03-23T14:49:47.223386Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index-RoKIdEzn.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/index-RoKIdEzn.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=0; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81; twk_uuid_68a472fefcd547192dde9e22=%7B%22uuid%22%3A%221.2BjJm2Ru8bfdEmhmyI0e0lBzwrbjVlKyfuqyviT094Z0rH4XiOXJArZq36QokqXukk928ifllIjG6RUs8jGjNDnoHlrQGQxNxzhcwJRUFF3NXckwv6sIiRTkAhO%22%2C%22version%22%3A3%2C%22domain%22%3A%22galalbet1060.com%22%2C%22ts%22%3A1774276472466%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1301\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6413\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5d5ASLbjj069QCQnxkRktc7UbOnbPrLLGtMoZ0JBps%2Bq2%2FFBZhzbN642sjPGIStlsY1F9qE%2FBPtTTfI888PEDIxloIqYvsHEmP%2BQiMKW6%2Fykbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28516cfa2f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2923,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2922)","md5":"a6ba0618454ca470f4b0d4bf208356c2","sha1":"22638b0b37e9be355c896ad28bacdf581ff2ec9f","sha256":"61b39cbdbd7aa6c5398a95a772c2f1f0ede32c7325311303bde0e1c48f6a5b6d","sha512":"cb9f93f2808fecc323d30947a9a2a54b17eda583d1da8745756e8a126c35f34a67e74673a1480c1f2e82f469a7fe4ce149eaf7023a9c025be7489a2f224a629f","ssdeep":"","tlshash":"9f5111c76042d7b8afe708e6829b10b074374e5cfe1f449092be58864958792e36bf4d","first_seen":"2026-03-23T12:48:40.293283Z","last_seen":"2026-03-23T14:49:47.30159Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/RemoveAll-CD8tPEh7.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/RemoveAll-CD8tPEh7.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/GameListItemBetBuilderIcon-qDulsDM7.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=0; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81; twk_uuid_68a472fefcd547192dde9e22=%7B%22uuid%22%3A%221.2BjJm2Ru8bfdEmhmyI0e0lBzwrbjVlKyfuqyviT094Z0rH4XiOXJArZq36QokqXukk928ifllIjG6RUs8jGjNDnoHlrQGQxNxzhcwJRUFF3NXckwv6sIiRTkAhO%22%2C%22version%22%3A3%2C%22domain%22%3A%22galalbet1060.com%22%2C%22ts%22%3A1774276472466%7D; _ga_MCEY36CK22=GS2.1.s1774276473$o1$g0$t1774276473$j60$l0$h0; _ga=GA1.1.82658653.1774276473\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 185\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BOSykQv%2BSy4TdV1NNG1aurxT%2Fg4kO3vcsXTvGyqRQvdGE8ZLdGEZh%2FcsKx7WtPGms369kiGAVx5yhV2kM7UGLtZfAq2jkX2jW6w7O1qfktrCFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28564b442f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":329,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (328)","md5":"fdadfd89d55f9ed03705335de73ec6df","sha1":"4193c848914c623a740f6fe6be7799db40781563","sha256":"24a17f4331e40b4cc190c141a264599e52fdc735fcee673d05bd5c52e309a041","sha512":"328864072a1239c652b75ff30141804f9e4068ffd36a854dd0a0c9992a98d176643c713e5edd7219ca990f9973624c77095cbb86c91695028743b3ea1cb9ae1d","ssdeep":"","tlshash":"b5e04f8da051bebaa9a52ace6e38800670150d6ce739019090fb58546ea85ae721a6a5","first_seen":"2026-03-23T12:48:40.568762Z","last_seen":"2026-03-23T14:49:47.196673Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WL4QZ2GQ\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:37.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtm.js?id=GTM-WL4QZ2GQ\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 23 Mar 2026 14:34:37 GMT\r\nexpires: Mon, 23 Mar 2026 14:34:37 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 23 Mar 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 129309\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":399907,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32337)","md5":"1e03977d60f4806a18a174120d11fa9c","sha1":"8721c667ff56e40284a9fb58ae0f9347c151cf07","sha256":"fc7a254f4446147c19dbb3d1279f2efae44b9bcb013a4c67cd777091942c7ab6","sha512":"d68cbcf310dced7b5aab190049a1194bd8b7b8f25b98033e1823659f5b16a4d953f18cd16e2cde11e80839ac39916de71ef805082e90cb4fc3de243456037d63","ssdeep":"6144:FrL5bRuPtxx5oJ8T4AfICc9JKwpm8SB2S5K2wzO3F1n3wRXG:FrL5bRuPtxxbTfICao8Md7","tlshash":"a58419cdb7dab4664393a474903f018ba27a28e2b44cd894f086dcd43e706aa5177f7d","first_seen":"2026-03-23T12:48:40.624802Z","last_seen":"2026-03-23T14:35:26.049162Z","times_seen":2,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/if-defined-CWaLTnLW.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/if-defined-CWaLTnLW.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 19472\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dUQxts%2B8b75zyP2%2Bm4hckhGJbI7Jl%2BkoQBUg2JoMJ5nGGzAHJOfrPCFZZBGPBcp0qidXvWpBXMUBMDkdVtUdyuKkKbOwbLodcJKIfpBmebCUpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28431ed42f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":53241,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18566)","md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-06-06T21:30:11.633829Z","times_seen":639,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/getMarketsAndMarketGroups-DHDRKPWQ.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/getMarketsAndMarketGroups-DHDRKPWQ.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/PopularMatches-DWx3UOYn.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471318; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1808\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rDWSd2wUaHM7SaCVHSYMDo22z0ukwzWC2VNLrCo5gMuDYM58fvupX5t7JzsWxp6kZDiPG0%2FWsn3j2damJitipQI49qldDSQdVWaFTEgAWoWzuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284a0c5f2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7270,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (7269)","md5":"cf3ef8e236f9c455217d7ad1372fa3b9","sha1":"dbbf5401084368be58e9d43610b9ca82cfb36f09","sha256":"36d659322203a0a4fc314c72eac1127e7612fa21fecb4df4971ff490c09b0ebb","sha512":"5f2e024baf668d7b6cbe46c040ec75b4aa52cdbfe3c27c356d89344b1f3cb07053f75df422691723f47cbec37acf848fffff04709eb14b8fa86a0e180c84d3dd","ssdeep":"192:Rr3Fwk2T2D2E0iP1XjkHjjkHE2t2p2A2V2+2DPAPpPuPQPkPAjkRjkKjkJjkPkjE:Rr3Fwk2T2D24PRjCjt2t2p2A2V2+2DP5","tlshash":"b8e1e29e912e6c46dd7f063cf6c12b26bb333f8136440695f9de539da509286312a328","first_seen":"2026-03-23T12:48:40.348229Z","last_seen":"2026-03-23T14:49:47.249862Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/img.gif?f=sync\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a\u0026ttl=\u0026rurl=https%3A%2F%2Fm.galalbet1060.com%2Ftr%2F","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:38.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 19:28:29 GMT","end":"Fri, 22 May 2026 20:28:25 GMT"},"fingerprint":{"sha1":"36:C6:D1:CA:01:47:A4:1B:73:8E:62:DB:CB:24:79:4D:06:01:3B:B5","sha256":"11:41:34:A5:A1:10:2F:10:C6:7F:8A:F2:77:75:66:AA:39:99:F9:E7:00:8D:1E:EE:4E:30:42:B7:A3:82:28:31"}}},"request":{"raw":"GET /img.gif?f=sync\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a\u0026ttl=\u0026rurl=https%3A%2F%2Fm.galalbet1060.com%2Ftr%2F HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:38 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=088302cb9a5b42acf628e580e160a364; expires=Tue, 23 Mar 2027 14:34:38 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: 9e0e2876b9f08be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-08-17T09:23:28.243942Z","times_seen":103517,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/13/27589.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/13/27589.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 11649\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Apr 2018 10:39:02 GMT\r\netag: \"8552b5771d7d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:47:40 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=ke4YvEsM5Ljud9s9zgGoXp6ScPZc9amkU79idU1LkfY-1774276472.5297785-1.0.1.1-eW8a1B_smdvD6d6rEu0YXTcOKkGJ9La029FpLSFmq1Q.Qa1K9NyizfPc5ND2RVx_srJa80fPuzH97hOU5ZYFO98vLEfC4.J1Llhd_ZC74UXJfwOyMOXqTHgqxwfTg1XK; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iT8oCQvaKLp%2BN24vVfXlqL3iuay7iQWO3Gvs2168xoNFp9Qs3bbNRejlqBhYm1efqpuXaJ5pr6DgmHL7p3%2FpGL6BvCXS9mFSHgvdxByeK4Jz7BxOBCbNHhpm1Zs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e285149e10883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":11649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"1c580c50a1c1003022cab546a8266764","sha1":"752b145c95b15ac1c4d26551c0b069b14cab0de4","sha256":"2ff254aaa5b78b2d8b880aa10e9dc1c3c2fcf12d7c43bdae1cbbfd8170601401","sha512":"763f7f41fad63732079ab670aa343ddda815bdb2923708548e42e6794059034cbc8519ea693f39b695a89adef379b18b9fb0c0a55c924611c89f574bf379b630","ssdeep":"192:M9R6s/tAdbK4gz/QInjAaHE7HcBgDhbc+f4N8jg7MATrRqrr:M9R3VAdbK4gHjY78SDhbc+ih7RTtqrr","tlshash":"5532c0151c972a0d7099af94afa5033aff5c5b29bf8e68d5e1159374e885b3d0080fd4","first_seen":"2025-01-01T04:07:04.213278Z","last_seen":"2026-07-12T23:52:51.288216Z","times_seen":59,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/146/293351.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/146/293351.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 11987\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jun 2021 08:50:49 GMT\r\netag: \"ba3759b1fa6bd71:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:47:40 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=nNgotfQtBixpBYofa2NA7pQvF.wcxVQy_aVbd3Bhwh0-1774276472.5311463-1.0.1.1-481.IxlMjAyJQBZM1aIdppu4HFmZu_TqCTxCVu0Ob2ctvDdS0tFheKJWsT8u3I.JvL_hWyYNmseBfFcJY3DN6dyHehr5VpT17LF8ji0WyIIoGWKgGV.0Rsj2kp6GsIa8; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yPjKV4JO3%2F7ARRxAx0cCrIZx%2B%2F0KtbF3g9ddGIIZVoLVKyTn58hSonJzuUlzT5MwhwPMdPmUJt%2BZb4qZpJCtf71h26d9yW5kmqxb4Jw4DoCDHAE4W2hRXUPLjzo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28514a150883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":11987,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"ac58a249d30d0a4285b44478dbd179f0","sha1":"99583319a78e6851267d9eaa6e4c71552e7f1bdf","sha256":"275b6b1523e9758eed14f83e977b338bf14fac23565dcaf1af8c65d6de6f76df","sha512":"d22e6cedd6ff08d5d02f6b52214acc1d96d18d8258f3040591da13ea85913d77d3f74f1f8db1ce8b1e703fa43fe7d141a55b17b8e3e34dd92e9db8985117fc58","ssdeep":"192:B4emJn7pxcWfHOjlUR+/Ure1U1G7/vG4YCBQDxRBoXhZFe1VZiNkcbS:NaTmuYUS1HnlYCBqvBoJen4Nkz","tlshash":"d932c0c1edc183d6a630167aa42e0bbdff2c29ab64d6b517e210919b151c724df0cef4","first_seen":"2025-11-11T06:14:52.08811Z","last_seen":"2026-03-23T14:49:47.230303Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/logo.png?v=1767600520","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /logo.png?v=1767600520 HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470271; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 7738\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:38 GMT\r\nlast-modified: Sat, 21 Mar 2026 00:05:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YgVkciocf1m88ZEFYIER5cisw0pFLD%2BjGik1u5lsiFy2PCHD2PXR8aMViiknr3rABb%2BSuOCoGH4Xu0lVyqQfdyIL1zU6USWZdu8GJ%2BqUSYk4mQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2843b8e12f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 120, 8-bit/color RGBA, non-interlaced","md5":"60c432b2e1f44042e6831b308a2fcd28","sha1":"a0092dc780b9c15f23421dedf670462258e4bfea","sha256":"45f7ccf0315aa2e44a658598ba76a0993ffdb4ea7dbfbb569ddba207929a7461","sha512":"f4a8c1c80e4cb91a70a4801ca5e7efcc5e4cc742f4939f805cb65969d34a896b1bf2f82c5f2bc2869b8e6be0439157f84b1365dfc3c76584ff2cd983e97d5eba","ssdeep":"192:yLexi5CqFsyyyjU7Bmu3n/0Hw+mvTZHOpoNI2kAZKqn:yyUVmoCVFvTBhIGZKqn","tlshash":"69f19fa70753e811ad00922f841e0285bfc412e5f36bafce13b3df19862515475a96e1","first_seen":"2026-03-21T17:26:39.532964Z","last_seen":"2026-06-03T04:20:31.943261Z","times_seen":48,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geoapi.21btcoservice.com/?type=json","fqdn":"geoapi.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /?type=json HTTP/1.1\r\nHost: geoapi.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Ojaq70qjbfGZgKoQwVrD7qbbXclddhLHx5EYRxIMH0V9ANV8WAt3%2Blbyp4Wi1yhbLzMQYKe0XDsNGQ7HJSTO3M3jj5RZoyA4DZWtaYpt9U%2BJ2WRm6sX3Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=rAR5px6nlhGGfn40QzK.pZqmHobDKq5Y9xce51disps-1774276469.594203-1.0.1.1-krqkvPi4OJB2eg82ZAT4Z0ajbcBfuEX9B7o1oD_bI9G1XbbfLmZUHIKIYvWVjRDQvr1K1ot1vQdSxyTPAJ_eTrZ_B3jiUNB90EgF5iC4nt3hL.Xq8AJyRvI4ufPFi6xv; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:29 GMT\r\ncontent-encoding: br\r\ncf-ray: 9e0e283efeddc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":201,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"ae0c7b15f7b07d5287f4f56fc107254a","sha1":"dec4cfb67f23a362cf007e3414411a871f42f8b4","sha256":"e64d2e0a65cac499cbd1024efbfdd31a982c7a1d825de1b2bdcd6e4001e7854b","sha512":"74b1f188e6f60f077ee12e4556f5d70f415e2e0f89f8c513a50df271545efc9d30f25d65a4ff4acd1cf25c60d0a70fd5664bfd72608ac1b75237a02981991b8b","ssdeep":"","tlshash":"c0d02218184d8d8aae34c2882a4fa9331ab220ccc28f40c4828aae31c3d86ec3288840","first_seen":"2023-05-08T13:32:10Z","last_seen":"2026-06-06T07:02:31.879116Z","times_seen":186,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":52,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/SwipeableContainer.BGvxD8Ys.css","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/SwipeableContainer.BGvxD8Ys.css HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/tr/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470775; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 423\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:38 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bsjpm2lFBYBRbXSz5%2FH3qY%2FKUpEPFEC%2FALKIElL1ONTB2O2BvZtF046wAY40oP0VEoJI2n2XvRi2UP4WShZHQhmXIZklayXN2g1IxpVRm6JF6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2846fabc2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1833,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1832)","md5":"639c15dfba86f88b79bd3270e784ab95","sha1":"98caf793faaca4ef94b39a65d315eadd89edc449","sha256":"881a88d3e934410159792afe20616ea9aa03fc6aebf7c3a29feda37a78b5fb93","sha512":"556b83ee5cd37491b0bf7ec6730d353b5abb3aabc670f1ace3e0b491064b3e0b83ff05ca29b42455b01fb0ddc33f4510d073ce780b7fb4f300c7a98ee54e2f29","ssdeep":"","tlshash":"2a312144cf450039bbe2223f99cc8df80a18d9b3ea314d8f76c59886c6e255937beb55","first_seen":"2026-02-22T15:27:55.467958Z","last_seen":"2026-08-03T05:58:17.571362Z","times_seen":135,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1060.com/casino/getGames?partner_id=751\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026limit=4","fqdn":"go-cms.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /casino/getGames?partner_id=751\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026limit=4 HTTP/1.1\r\nHost: go-cms.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: application/json\r\ncontent-length: 1631\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=qwdh9Vy7KHjYjBkKeZKdhEuLB5e7jucHpTUT1wvRXOs-1774276471.0520918-1.0.1.1-FZ_96tb0jWBQqZ34or5hO0Y1bcd5hzlxX0JvIDFROMWkVeq1A8Dbg0O_1v7TkamqCVNq6RgHpMlux3JM82LV8C4ZDkvLCXOLBWJTKjrmioUt9GYlPI0EcFPUcd6p4_7a; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0RHWN%2BXQT4Lq2I9zMwIrD9IFZyAzs7N9l0DuhY1hBRlhRjH0v4LefDZyZiWH6%2FMz7ZArzYQcvFNnpdVha54mMYjQwAUJezX%2BTDBEr0IWp2QTjISI%2BFE%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e0e28480d595a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7823,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"39ce157fe2dcce1a31fcebab6e5301ea","sha1":"a9dc4ffdc732a9d52112694edf6cc6dbe0171d4b","sha256":"3db445c17e8ea0d669238a66b757d4b965fca7fec096389db856a312e3307cf1","sha512":"7dd7d18ab950244d6642528de5482671bad504388b3a776c23d65bd46c0bec14323e176a3dd46518c734926bc861d90b14fa0806678285ab2933fbc206c1aadc","ssdeep":"192:IX7Y5MVbuoI50OzYwNUB5MLR2mR2bGse7Y5MFLXt46nFsw8UB5MLR8rizx8Gww:157YwG5Rz5Lw75Qww","tlshash":"8ff11e2a0b08fbab5f15298128923d1ddcdc2bd3dd65edc04ebed8b941e558142b12eb","first_seen":"2026-03-23T12:48:40.310724Z","last_seen":"2026-03-23T14:49:47.26664Z","times_seen":3,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/a38db32b-8291-4d25-9aae-4bf4b6e6f300?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/a38db32b-8291-4d25-9aae-4bf4b6e6f300?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2444\r\ncf-ray: 9e0e2849cc91e9c1-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6410\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEskOIKWizVhJrvVnrMlrV9p-fmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=19+0 c=6+17 v=2023.9.8 l=2444\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2444,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b44902a539b26f42ca501a8fc2eca9a","sha1":"c9156f826c8af47c13c4e95a4953987d2c34a74f","sha256":"e1473cf463a4e737486548692bef2ff33e1435ccb7b1d4d9e4428371b57a2666","sha512":"2dd9d9716c420f8d993a738149c8ed8a18bb8ee2034cadb05c3743cbab9ecb9eaabfa064be34e53fad571e80eeebdf7292cb9811a369dd67d51da327fd80fef2","ssdeep":"","tlshash":"db513db78f5778c0ec5c0e4b60017a48e401be0053f0e18caab51dd2069c629d371a8b","first_seen":"2024-06-21T17:22:35Z","last_seen":"2026-06-06T21:30:11.65097Z","times_seen":1640,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-3ea2c7ce.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"52698c6dc96b5f2bd13e8f921334e398\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 560240\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e28520dfa75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5504,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5496), with no line terminators","md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-17T09:23:28.221755Z","times_seen":42650,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:28.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/sweetalert2@11 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 21418\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 11.26.24\r\nx-jsd-version-type: version\r\netag: W/\"13877-yvQx6m3IVnvgENB/T31XmBY4Id4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230216-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 1569\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SiGz0Xpj9qrlxXQXPuarEoPVTP6%2FJrdSaLJ%2FHRrlU9B5mQ6a3ogNrG7TtKhtiG50d%2BvilifuI2MI1dTgV9PAmtNWDMHEG8U9q5BpDNgOPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e0e2839ee148deb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79991,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49001)","md5":"e8f033d3c7a50e4abe3d98ac65234d13","sha1":"caf431ea6dc8567be010d07f4f7d5798163821de","sha256":"7506c8f4d85e4707ab46f9858f0c6e65e3316b9d2f122dcf485b9dbf39d5a7ac","sha512":"ecad9d89ce602e5121c97135933a33122f0d9b32c15b43949d5fbe51fe576da069e9a416772117eb4666d8354b685046c0d7a3e086f669fffa488e2f05ff0ba3","ssdeep":"1536:iw46xylPIZSKcO355lcVU/SZ2DUdzI8bRj:PxYIvTlcVU/62mI8d","tlshash":"e173f8916a00f03776bb45ae65d1e7047ae99405fcb34894f42cc8804fe7d4f26b7aba","first_seen":"2026-03-20T09:57:21.567576Z","last_seen":"2026-08-06T03:45:53.052096Z","times_seen":2841,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/68a472fefcd547192dde9e22/1jj9jjq2k","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /68a472fefcd547192dde9e22/1jj9jjq2k HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-69967ba6a3b\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 45\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e283c5a4a9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"10e17b84cdb7a53a99181bbb1477e35a","sha1":"8e68153d6049623cec9ec016f75b13ea9672ad6b","sha256":"46aafa5f4fbb31707e2590f520353250cd1775d28cd9af4fed3a18fc017a7185","sha512":"fd3fb9d1df530cb284e5986347bdd659a006d65b9c7414339de9766e8d4c3924088ccdaf2ebf90df098f4e20c68d8fe5e98d9b377e64863e97a777cb3b8cc648","ssdeep":"","tlshash":"a641ddea5b4f1c56b22410d90ebef90ef47720f745da5892970c085272757ad2f8de38","first_seen":"2026-03-23T12:48:40.320296Z","last_seen":"2026-03-23T14:49:47.189664Z","times_seen":3,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/pageBuilder/pageBuilderCssConfig.json?v=1774276500000","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /pageBuilder/pageBuilderCssConfig.json?v=1774276500000 HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276469345; twk_idm_key=Ax1tIpkueYdP8a6wWFjic\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: application/json\r\ncontent-length: 146\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s0XP9nqXPq8CyJiA31UdwCuxKmPUnhZAUrqF7cl%2Fr9Q72azfJ34jNY%2FfId1ptWJmOTULjF%2BeikmRv8jb8n4KuBms7XzZkkN7uokbrDnlAtU8rg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e283d9d4b2f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":256,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"79f4019c36d7a4cb9df2033e7b5fb84b","sha1":"26669a79ae3fbd6be392a64e7f20374167a4c413","sha256":"ece860692f6cc0dd4334447f98a8c2b4d6b22be7fa93441ce3acb8513ab12f70","sha512":"36cd93b3774a4365767e079a9924399de6c3f5dce18654f4c138d0959085798cffe9a88a78048da50040f5f2eff0d0420ad79e5673a5f4ac5684e84b67418b43","ssdeep":"","tlshash":"afd097119728cf53135aa1b2028fecc1641bf20b1280c5ca70c5e2bd70c86181e83f38","first_seen":"2026-02-24T14:18:16.797449Z","last_seen":"2026-03-23T14:49:47.299334Z","times_seen":16,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameListItemTeams-B3T5Xf9i.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GameListItemTeams-B3T5Xf9i.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 665\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HTiRNbWP%2Fg6TQPjGLP9lgHNiqK2XdUHMtzFk06QI2daJTLs4xCwjNI9B5fn3%2BE2yjBRn0Re%2FKPPnEjmWLwrLQQnsmF7wZT0IBi71JWESHlszXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28472b492f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1538,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1537)","md5":"67accc82f86da0497fa502db5f6076e0","sha1":"cb05c27dc32f2194dc13d7c15cce931f1fcb73e4","sha256":"bd85a9858ecdcf9de6949a0888debacdefe5b47838930aea2bf423d8abbeb160","sha512":"f5952efafc82acb3b8f5fde12dc723970ae2376c3af396bfc2dc9545aa6569bd7c52c3d8eef1cc23d451493c6545b8e263006fdc3108b24e22f5d0a66fbfae92","ssdeep":"","tlshash":"c3310045f020eefdfa511cd9e87d4136711a0af5c73c52d1a16ea6341a3402b771a7de","first_seen":"2026-03-23T12:48:40.665355Z","last_seen":"2026-03-23T14:49:47.19248Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/MarketSlider-D0nv4XTi.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/MarketSlider-D0nv4XTi.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1714\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=STN90BDAz%2BhPn3qJrlIhdlzChExatW4YzriYtrVeAne7Yi3AUrL5dMl5PPFhnzci7ox1DeHjFuDlvcIkViTio2FcazHTzQwLbvRYN02uJoOj9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28472b572f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4091,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (4090)","md5":"09da9036327329f84ccd4c750927a23f","sha1":"3626aa33527ee2fc51720bae40e6b72a45a03d8f","sha256":"0d7f86a1e7714aa2cd58d708d642629d5f4ae5fe211ffa66f3891063aab648df","sha512":"f9d91e4c9ad1f0a15b86faaf465e65767e017306b11a1533c3bb11dc2f9a1c64c97a0be78e63fb5a913e15becf52f93f03f9826b07dab85a2dc10a9d226b04d8","ssdeep":"","tlshash":"8b8185c8c039cc6431658cdea5372f13e6743a739bb181d3b0660daa4754209db7eeb6","first_seen":"2026-03-23T12:48:40.346009Z","last_seen":"2026-03-23T14:49:47.202515Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/InformativeWidget-CTNuPyrc.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/InformativeWidget-CTNuPyrc.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470775; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 570\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VO%2BJBgIxURJalXhOtCO3%2B%2BxW3sWRvrFU%2BqEJQ%2BkaeTVtm3R12P9XfIcIeJ0UxdPlyiQPX0o3j9bxpnGXt%2FxMDCpHhSkO5G1elOcrrJtPzBlQyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28473b8e2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1021,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1020)","md5":"9f8c7740c95695c15fc163b6ce90fc0d","sha1":"369b1bbc5cb604484f9bc711d2e0b33a84a5fe62","sha256":"91ff9c46723bfdc16f53b4c7b8dd15a82613474071904a37a3a47641b2d4737d","sha512":"f54194bff15e5f8340526c84b7ec90fb347a426fdebcc4b85b7e8b967818376b0ae2159ecc42416a6fe33954a28d4d5965b1e0d0e01891ef07ffeeb1913d81be","ssdeep":"","tlshash":"64116581e695d63ef03604cc4716505465226ed8df38d8fd48773008d4b4d0ebaeafad","first_seen":"2026-03-23T12:48:40.543722Z","last_seen":"2026-03-23T14:49:47.213055Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/1/3640.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/1/3640.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 981\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:32:13 GMT\r\netag: \"f5bc28d6f5ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:47:39 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 6412\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=5nbcolP47vs4z.7JguiPztn4VS0hSlCCB1b7Q.w2EfU-1774276471.8770583-1.0.1.1-5MvjYyjq548y0XuE_Roougb_G8DtF.Lx8BL1yyAlFTfbDfZhs0LEo.9mlZ9tMQPBm1lG568iqpZPJ.MKU.KOJe3QZE0.gzxHa0ShJGO3gT.CgeyFkYTWDBIS7bOh7HSA; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a6N416mytiqZ8%2FRqaQlwfttBzSInxVj3M3VNtEsxoJW1eScmZZjzvas0%2FKD0y%2BFiSvSdsvP6A8ahtkdp9ViUs%2B9o1qHrhYUbY98mWzVJ2BRi9njHNyg%2BcoWpQ2c%3D\"}]}\r\ncf-ray: 9e0e284d384b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":981,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"81a095dc24034813f7d0bcc084747d1c","sha1":"d3a3a933176066bda8f3cab1ad761e690f047624","sha256":"376fb4229b3b8800dc51d2d3ee947a0a709cdf5339d1effba465d3c4608c9221","sha512":"4a213bb520ab8bcafe1eec9eca985ec247f8d98db0d15ab4e3041955d7d91ed78d25a37701b34b755b2d32f7868fb6b1884c9f03981217846dd23b712ef31e1a","ssdeep":"","tlshash":"8c11c8d126c0985c3c8961241263fa38e22712df467139349eb1e97749516f08dbb8bf","first_seen":"2024-10-13T14:30:57.210486Z","last_seen":"2026-06-03T07:06:15.680833Z","times_seen":63,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/88/176891.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/88/176891.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 9774\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Apr 2018 06:06:17 GMT\r\netag: \"4088a987a4d7d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 14:33:48 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=Lzmowc7gYEzXjyZept7uMV3_3gYFJjjh6if8ha9MBKY-1774276472.94259-1.0.1.1-s5aE6WtoAn7rVNWnMSl7bmVwcx9P7Utpkj.Xa1hBwX6sDOV8XO1_TKVtIAW0.IsXmEQytFZVPrQX.RORjvn__pAN8rSDfxjt7i9BJjyvngN2RJWbf1danVoSioetRJ5U; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pUO9fOSLgVeB5%2BmemecLSg4kNPwBY33hNpA%2BNEhPSCRmlJmyUdvpKYYOrAb5tapJtFk7j1uW2cXzELJGTRT0dQhLPp4WSp4qjo0bNXGMZB2hkUIfyj4PIlmcAKw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2853e9060883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":9774,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"2e8fd04ac6644b142004b265eeaf0409","sha1":"f218b15cc0e620068a8117692c2a77718bb09b04","sha256":"f59f69ccc17f8f0b5a6e4cf0b650199f7bbc9568ca82cf58197535c64d23dae5","sha512":"57947d9f690b16bab5b8e5b54b23a64fdee714950d2deb7ac1374231f7d2514c63f23b791beddb9120514eb386fdd5860d320e6e8fddeec15aedf78d04d7de82","ssdeep":"192:pksVNB8MRboBDR+sneSeyR0Fxe74jI+iFxvA5uAMcMX0nQ:pkEXQR+snXRkI7eIN7A5j/MEQ","tlshash":"7812bfa133a3e84f97fa42c33a4e04b952608ce077779d825083d9a999a37ccfd75034","first_seen":"2025-07-12T11:45:48.042936Z","last_seen":"2026-03-23T14:49:47.227918Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/68a472fefcd547192dde9e22/1jj9jjq2k","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:28.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /68a472fefcd547192dde9e22/1jj9jjq2k HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:28 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-69967ba6a3b\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 45\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e0e283a99fe6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"10e17b84cdb7a53a99181bbb1477e35a","sha1":"8e68153d6049623cec9ec016f75b13ea9672ad6b","sha256":"46aafa5f4fbb31707e2590f520353250cd1775d28cd9af4fed3a18fc017a7185","sha512":"fd3fb9d1df530cb284e5986347bdd659a006d65b9c7414339de9766e8d4c3924088ccdaf2ebf90df098f4e20c68d8fe5e98d9b377e64863e97a777cb3b8cc648","ssdeep":"","tlshash":"a641ddea5b4f1c56b22410d90ebef90ef47720f745da5892970c085272757ad2f8de38","first_seen":"2026-03-23T12:48:40.320296Z","last_seen":"2026-03-23T14:49:47.189664Z","times_seen":3,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":32,"dns":1,"connect":8,"send":0,"wait":16,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/conf.json?v=1774276500000","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /conf.json?v=1774276500000 HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276469345; twk_idm_key=Ax1tIpkueYdP8a6wWFjic\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: application/json\r\ncontent-length: 4258\r\nlast-modified: Fri, 20 Mar 2026 23:16:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IxxTnsVGaBJB7XA46%2Bfq6yEREW3AptBvBvq12nB5ZC9D82lQ0YK48aEZHxvJzsa0V3Uwb%2FhL3ho%2F8ZOLxQCBUstqLVO3J2qRt%2FuRG3GUNQPUyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e283d9d422f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11919,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8ad9fa4be1a9ed94c689d20a262a8c12","sha1":"dba0c5059474f9cac6fdebc6c8ec2158beb8d449","sha256":"fcb59dab6d2f862b6555ddc0ee364814984745bb55fa9c53f822fe59b07dd502","sha512":"b63bbcc3a19f2fd78d3392bb85fb1977331aac8a0ac34c2eb5d285767d99a787cfbbf0592ec2b0796d07505238deb7d3f46acd96c607e50b5185460ce3c0f6bf","ssdeep":"192:NT9qoAsco7sco9vB9sW8D7Nf6oAXWAoIVIa10dc5ZNdNH5SCb+eruUFDhGtC5L:NTAoHC9J9L8HBtAXWAXKdc5ZNdNH5Skn","tlshash":"b932b66367149ebe87c583c8b1cb7f0bd4bf186be9c5f495c98cce294079a590213a0b","first_seen":"2026-03-23T12:48:40.526296Z","last_seen":"2026-03-23T14:49:47.20529Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/public/proxy2.js","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet.winwingames.io/","date":"2026-03-23T14:34:31.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /public/proxy2.js HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nage: 44\r\nlast-modified: Mon, 23 Mar 2026 14:33:46 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gfB%2FySWlJE6lYHCIN7bVAlcw7u%2FwuhZ3UysIT7w%2FvOpHjgaNPsTQkDbWmaBp6K8qtvqaGRZdBhcomsgCJvceXLAGU1OG8RpbXN4VsWPpkUI2j9UkIOM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e0e284809d02d96-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19498,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1296781ea2c9cd24e19fe155b42373f2","sha1":"d7ce9dffbb2482bc2f3795cdeaa727d99e49644d","sha256":"de74ac92be5c23abac0e045e3380edf98b53abeb1abc7351e98ec06a71a01359","sha512":"3922435bb5f624625705a335938c57a7addd890b26905e7097bbed9882d0508fd10eacfd3fa32cf5b570deece89987d97773fc9377c68416dc03707c32e4af72","ssdeep":"192:0e/p461ScOtSD3FfjmfO6goK78IANjSLsZPiSLrBEpKYehsKs841+yUV22hhCsrq:l//Sk8fhPVEQGrUFAvRZIgUlM","tlshash":"ce92860e927b6123447334bc978ba146be1150971d0acd847f4ce394bf85b6eb6b27ac","first_seen":"2025-12-24T22:39:16.372563Z","last_seen":"2026-07-01T19:33:43.411538Z","times_seen":59,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.19.183.147","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /tracking.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxEvAsMvymxHM1muhyHDA-zLZDHowIUx7I-l6KrC9GMQHHu7v0TCzFkLMOvx4zcu5N-p4u3GXA\r\nlast-modified: Fri, 20 Mar 2026 11:49:45 GMT\r\nx-goog-generation: 1774007385482931\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 102724\r\nx-goog-hash: crc32c=e1J+Pg==, md5=o0TGerG0Lm67nCPjvZFtmQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 33200\r\ncache-control: public, max-age=28800\r\nexpires: Mon, 23 Mar 2026 22:34:31 GMT\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":102724,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"a344c67ab1b42e6ebb9c23e3bd916d99","sha1":"1b8af7b30cc9831348b1dc8b61cb57ae912a2b05","sha256":"216a409d1add9fcb0ec72ef2d4d02cbab37761ae2dbf41dbc2fecf6aae0474ae","sha512":"df8fe41d081450012161536e726cfe19aa425e2bd3544f8d3e612d9c623d4fc480ba7a60f9a9a6270a06121db1edb0a310b9d7e7d0ae9b5a1bfcd94980b07fe6","ssdeep":"1536:E5y/uRri7DJnagIckNmeuR5bydWiBwpDwLCPoRvCRW6Rtt:E4/uRu79aXuRxyk8vCdRf","tlshash":"07a338d67282b03493f785e7a17f6216b33a291c740d8410f17cec6a396a9878177f2e","first_seen":"2026-03-20T12:44:21.754759Z","last_seen":"2026-04-25T08:26:24.664416Z","times_seen":269,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":55,"dns":6,"connect":13,"send":0,"wait":9,"receive":10,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e63i0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:37.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtag/destination?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e63i0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 23 Mar 2026 14:34:37 GMT\r\nexpires: Mon, 23 Mar 2026 14:34:37 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 154356\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":465721,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"d218d87e33bfdbf10cce8999195a36d5","sha1":"0390e3d4e96211ac1514f6659c53a26b802317df","sha256":"926e60b0a1fa0aacc8e5d7c2021d94b97e3a609536e4310b13d680c4129b92e0","sha512":"fb72b76ed384a411a9063a2d2c7f6cd981c2e19ec54a81a952e5363cc407baae47fae517aba9499cc23316a5eaa7f25408360d4b44feb8326866ff961691c7cf","ssdeep":"6144:VCJ8B4fKAfICc93KwiKHnm8SBtS5K2wzO3Qpan8Gv/UywU2yIS+p:n4RfICAbHm8eeBUX","tlshash":"faa4f9ceb3da70265396f478903f018ba57b28a2b45cc899f189cce42d7465a4277f7c","first_seen":"2026-03-23T12:48:40.279135Z","last_seen":"2026-03-23T14:35:26.063652Z","times_seen":2,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/homepage.json?v=01/08/2026-09:00","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /homepage.json?v=01/08/2026-09:00 HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/tr/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470271; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 459\r\nlast-modified: Fri, 20 Mar 2026 23:22:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PAQVUzxNVzAyMosxwWqjAXpVZgIEQ6nsl5CvSMRrjoNfqgsDGGELTTh%2BEp3W0YJb%2Bp8mbfMymVjrZCAPpz24f5d88i1%2BqeOncsGzk6MMTCRIDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28449b792f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2716,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"003dbae753dfcfc05ea1479ba1ae261c","sha1":"956fd0d98afed7d452fec0360a7d37d0a6e580d1","sha256":"04438ef83150912b5e91ac35df6da7bdcd42aa1115de088393edeb84b0020993","sha512":"5ca07fb2c1bee6c8ce2a5f98f95754ae9104ea0d8ffebdb7f8863f7445c3026b3c266ade086d1331f9a3d5987269a20d63aa3a70c0a2a200653526eb244ed751","ssdeep":"","tlshash":"2251593dac14eeb8b3a08d63d2c263816542d964c7d84c5c1cedda6ad3ed2991480fbf","first_seen":"2026-03-23T12:48:40.480096Z","last_seen":"2026-03-23T14:49:47.245901Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/NotificationsButton-CB7B8FLB.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/NotificationsButton-CB7B8FLB.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470575; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 350\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2FpzQKq%2B3KlcAuD9vKjrQnAsl4Zas8i%2BOnhKVoPvmncKysBQJKFQRPlByJfSiNBbsEa8XgGaqyXiQTythp7ci1qJXzjDySZCnCploQ9fsPOlrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28455e322f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":558,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (557)","md5":"0e022315f157d72e3309d566233f1dfe","sha1":"284ff846b84c64713f2fb946f38f6f3dc62b136c","sha256":"3e91fe9e173e5930927fb72b0234a87d7766ede59cf93812a41d2b3a654dcdc7","sha512":"99599f85b065c3ca1adba0154405e729d1966a77e49f6c5316da0396bce45f5c2687c48c0d494ddfbda0d0b1313e19b6738ee4cbe9bf723ffd44bda2d40a4898","ssdeep":"","tlshash":"0df0c647a999dcb51bc3467063379015293e682daf0a544004ab3c95177005ac55f95f","first_seen":"2026-03-23T12:48:40.341597Z","last_seen":"2026-03-23T14:49:47.212494Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/88/176891.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/88/176891.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T09:43:02.208337Z","times_seen":17933663,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/menus/header_menu_751_tur.json","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /menus/header_menu_751_tur.json HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470171; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 2402\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oLDdMYFMg4QYDREl7yUaWIztp%2Fn3TLFAmSTIOgE7S28ZAx0yvddaVb4HQK7PoDFBrB42KlTIvZUGODVWKVKSm9ZnDxJdtGN00fHWViBnPQ8vVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2842fe902f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32911,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"84a85f3cfd9e0e2b7656618fac9b0813","sha1":"b14e032724d2d05d08e61120ccffaa00adf7a818","sha256":"24a126481e78872b59ca8a43087ce2d90c3699badcfed87a6292f26dd56bb5ad","sha512":"3fbac46b7b94fb2d6768d28754843f07a68523144a88243eeafc65a509a9c764d21da35e76a3e050f256ae8f12846a383b24516059c85c7b1dfefd9a7f805f00","ssdeep":"768:ESqylDCfBFZS9jl4UrRcMDkDzaDCsEP2DFMB0ATF63a4Cj3dYjkKKbeSHQa4losm:5DVDYmY6AF","tlshash":"67e27222e83a4c5393887a3068d50687975542c79da6bc053acc598d4fcfc5ec6fa3ee","first_seen":"2026-03-23T12:48:40.301501Z","last_seen":"2026-03-23T14:49:47.238462Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1060.com/svg/Promotion2.json","fqdn":"icons.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /svg/Promotion2.json HTTP/1.1\r\nHost: icons.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Jun 2025 11:14:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=1tOgZKZbPBSjeQf6L9eW0voBdMvr3KaSYL4YTJPGH1c-1774276470.455972-1.0.1.1-x5D0kutui7E3P3Fkv.0eqqsmyqrIeRRXbwwDBfDMm5wrCHc_q3UnjOLh6mwnQJQ8lCxsYjBSHiAD5cfPxmTU2R1RPecLc6w9sZChWI1XWqNYrh5WiHAxz5ZM7gaj5O4U; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:30 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WqF4SEGMppCEX7ODrdCYrHmvisVo0IjPpJVLWjH7sBWqqu7XINYqSAow5FyyS7Z%2BVgYs%2Bs%2Fk6ouHrruKuDpw%2BNglfAkf5h8VlQ%2BXg2UyzTgkgu4pYg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"68627184-382\"\r\ncontent-encoding: br\r\ncf-ray: 9e0e2844591e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":898,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"31cbecb2c7e793078b4a8e43100c2e33","sha1":"e073b0e09fcd4244f6c86b8f22206a46c4af9f3c","sha256":"a7ec0feda0f0f44aecb09628876438cf31a3d33de7393d25fc1b39d6251bf104","sha512":"6762313ddd6985ca71ea5e90b3a05664d0d1a3cebfafa6da07ebff76f62a3c9634d17ac226a4fabdc606ddc5c7c7adbb4628f3e0c8a30d5e5f96e574266d2242","ssdeep":"","tlshash":"7a11cce88739e7b438cd1f4f9a3d4dcf3614261a683de034e73eb9c4a61391c652119a","first_seen":"2025-07-08T23:44:04.701479Z","last_seen":"2026-07-25T08:10:51.788491Z","times_seen":196,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":28,"dns":1,"connect":1,"send":0,"wait":60,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/BetslipControlsNumpad-5uPhIi94.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/BetslipControlsNumpad-5uPhIi94.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 881\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6411\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YkquDq%2BrzRbhL0OT6dka0NGZlS87RTehJhjggC%2BVw3SbeI1AxvWYFLKUielo03BEq64XBGp3lsBJ4wT6QKHa4YUv3tNjNSabZtl%2BVtM%2FAMZMnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28516cea2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2607,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2606)","md5":"ddad8589eb1888b52c33db968bee65f7","sha1":"6a2b6affe09846d16474a308b4c31f0d52fe81fd","sha256":"b42d3a3d5a10bd50ce5232a6452341075fb91b8a17294fbe009e38e1ce08edac","sha512":"98cab2b5dd6f95118a38bf6a30fb2b0d3970d882068da08a396d7d2fd2a1f0b99fbd9829ddcd0d3628f27d5424db22ee6330e648eeb31a957b2d2f9b1d317aaa","ssdeep":"","tlshash":"ee51ed51b001abbde67786ceb53e0024b00f2ba9d66811d7e47dac60bf6965570432df","first_seen":"2026-03-23T12:48:40.294625Z","last_seen":"2026-03-23T14:49:47.285306Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19330347\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fm.galalbet1060.com%2Ftr%2F\u0026group_id=0\u0026channel_type=code\u0026jsonp=__ovdiue913da","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.100.107.156","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19330347\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fm.galalbet1060.com%2Ftr%2F\u0026group_id=0\u0026channel_type=code\u0026jsonp=__ovdiue913da HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-security-policy: frame-ancestors https://m.galalbet1060.com/;\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nx-frame-options: allow-from https://m.galalbet1060.com/\r\ncontent-length: 391\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":391,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (391), with no line terminators","md5":"a688709d830ba6774475b2b898ca2c1d","sha1":"fd6e182d5859bfb1711574e056753e3093bc04eb","sha256":"eab6ca54ad541c3c3f20abc5a226433576787c02983b1c0d0e75483bb3f700bd","sha512":"cea444a1459e76d31cba4be17ee43a828d7c05e420ebed06edd763964c37cfc307cffd6af91e2c28e30da58e15dd2c73450c91ff106d28bb44a1600fa777868a","ssdeep":"","tlshash":"98e06aa3a25061b0d7c8e3be80005b023d300fd7400096bc747b0300031f7de7324407","first_seen":"2026-03-23T14:35:26.067574Z","last_seen":"2026-03-23T14:35:26.067574Z","times_seen":1,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"73eea1de9215521cb137b51419ba55a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 6411\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e283d9a899e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10839,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73eea1de9215521cb137b51419ba55a9","sha1":"a8876b573146cd5450adc92a5450febea8d33f22","sha256":"df1d970dbd95be40780e8c006102fa7892bfe26bc989ee0c9222b089038542ee","sha512":"277849fa8a9d59430663b5c1aac29a198436731ab59bc5968ed9fcfb839f00a31e6e278c3c78547f6e1c20d94847963375de011be6493af268a7bac25cd15257","ssdeep":"192:ImwHq/LrnzPLEgIE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:s6LrnzCE1iN+xkDOy+Hp8/5Avy","tlshash":"c7224269ce504ea702c29647399f35437624429b1f54382eb78891ac0f8ec6f71f779e","first_seen":"2026-02-18T09:54:55.751197Z","last_seen":"2026-08-17T09:23:28.132736Z","times_seen":29487,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/loader.png?v=1767600520","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /loader.png?v=1767600520 HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276469445; twk_idm_key=Ax1tIpkueYdP8a6wWFjic\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 456\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:37 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2FA%2B%2BE5pgZmIoRtF%2BFaMcXVazTfKZ2VDIDQeYjN8nVvpd%2BCsOKj9o9Xy%2BFhsWg7XT5SJ9Mu6x9sx9UdAtlLzJwrtfN6EQtt5mb%2FYV8DOyQxLoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e283e3f772f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit gray+alpha, non-interlaced","md5":"ce13d4aab7656181924146d7eefb42a7","sha1":"89af3054ab4cf389e7e905d2ec756095801680cd","sha256":"393b5575ab9863a7702eb2a6bd7405f3118d0da53ff1a3257d1d7353a056a59c","sha512":"4153a0d45eb10ca02aa1bca3f3dc78529b3d1a23d582ab9f5831ba71b9a5de126253d469d28276160f1ed27de41049491125726144c40e17a5fe2c26a77406b2","ssdeep":"","tlshash":"14f023d69fe31ffaccc05a9a7437c3710c22824a829936149107009c645ad2f8dc4e1d","first_seen":"2025-12-24T22:39:16.322656Z","last_seen":"2026-06-03T04:20:31.988411Z","times_seen":59,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/translations/tur.json?v=1774276500000","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /translations/tur.json?v=1774276500000 HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276469645; twk_idm_key=Ax1tIpkueYdP8a6wWFjic\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: application/json\r\ncontent-length: 62373\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rtXv%2FB7JLnCVrnMyj17ODv7GGY0b%2BT92%2FIjDdDLw6KgCRyyxWsuhrLYKf%2FbLmgSwadeg1WSRR7HC0pLjX%2B%2FtOzJ3DNGnPrRuttA3rFr0wgSlTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28406e462f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":199521,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (63257), with no line terminators","md5":"bd8d44dcbdcebd6cb6ff3e0fa817e0e1","sha1":"c7d48ef81a773a0c522d4d5c0c5cbeb24f5a5cb5","sha256":"97dd5d6f4c17f4688d956e7a5f11c004ae41381432e3d490ff59db23ecae0992","sha512":"e7e36325eb842c776abb6fbc44675a98fd076ba8f7c74001f5dc8abec2d3b3109fafe21c6c73a3585d0298ca656bf487b1d1dc21ff6b333834765c81da75e5e8","ssdeep":"6144:Cu+P3k6PSoI83TX+oSo2MDZwVcOwqTCKtdpxyKjscwo:z+/k66gD1ZwVbw4CydpQo","tlshash":"95144c05586e3cfd976207ce74de9e66b0fa0283d150e426bdadd63a138c767d22b90c","first_seen":"2026-03-23T12:48:40.562764Z","last_seen":"2026-03-23T14:49:47.190765Z","times_seen":3,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/useSelectedSportsbookGameId-CKK_yRTT.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/useSelectedSportsbookGameId-CKK_yRTT.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 251\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=seJEAObWscEh%2BFFw3j5GOWoSMVx3mpZ7jfoD1LrE8Dc2rt4UI48HhgZj6OzhG0Rv75FkfcpLzOaOLwGnx2G%2BrvrQQ8Ex3aBAEKUow3SKstJN7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28473b6f2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":379,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (378)","md5":"b9e1bd389a4076c7532d96ecc3a337dc","sha1":"9bf218ae6f2478b236998838155c5ad292131871","sha256":"1b5ec45de6a85879e78a9cf881b896464a7e55d770416f9c5f7f3771fda9de0f","sha512":"ad7cf978c028b7c9e548b08044a9d53f91505d79793b889e1eb1067eb9b20a2785ae576f1d450ababe41a21bc6ea4a1a02f60f4905ef518064fa38965d58cb2a","ssdeep":"","tlshash":"8de0618d44e556f022ac8cdd1112e012031c28157537cd68d0078f3252af54143da671","first_seen":"2026-03-23T12:48:40.291859Z","last_seen":"2026-03-23T14:49:47.261806Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/474/949677.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/474/949677.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Jun 2022 10:55:59 GMT\r\netag: \"62b98cbf-9a3\"\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=3_0tKEAt.a8DTbm33HLKtDaTBpbTBc487LofYdtzcSQ-1774276473.010522-1.0.1.1-STUT9EMDXpHqR6PZ8B7jAsIjI.pUE6Wpr2hJmIht6epTQZ9PnWwwFiTOx9spIyVXq3AQG9TGDqjg35wHU7GFl1Pu3tLCWpM0Cb_uRR.FL8go6Q56KLB1B677tJSVAa5d; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FFWxdCXakCCwWNNyDxJKTC9LgtJpSd0y%2F6bT53IHNV5VzKKh8M2MT%2B3noOxU8IE6fQcZGNGcm7M0KoBfOksqBcXtiUtDOfsSmeQze7TV9qluRmCIs%2BPwDwjhVyY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28544bc40883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"87af8083716421c45adf7b89c550fd95","sha1":"2eede979dce324b9cd8c9e45a4f1d89e27c74716","sha256":"a748f909eba7de62cc2b5325d56fd19af99dde087b3e64d9b759771f9667a356","sha512":"d28a590f64e63a3c78c08af9e4a0ea4655978ac7d5f327c10664f2bbec15013c80b735f97abe45164945e1d95a9a611dc3cd71ff084450c4c554ec3f72e81d07","ssdeep":"","tlshash":"47512c2db451c5b1b0ad894534db503397230cc5eddca7a5ec4e642a0d2ccd9609dbcb","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-08-10T09:12:16.484033Z","times_seen":221,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/log-performance/v3","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"OPTIONS /log-performance/v3 HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://m.galalbet1060.com/\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-q6xd\r\naccess-control-allow-origin: https://m.galalbet1060.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9e0e28575eed75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T09:43:02.208337Z","times_seen":17933663,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":158,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameDetails__platform.Ct_zKZjx.css","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GameDetails__platform.Ct_zKZjx.css HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/tr/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470775; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 337\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:38 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQH0ignhvQER2KAmdnUw2%2B5LcGantiDB7hAi%2FAIR15W%2BHJK53p%2F1abnie9eF7caeIktHv4t5%2FX1AAGUMFJo3PbeR2de9H7O3IywTrZqI4jqkUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28470ad72f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":964,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (963)","md5":"fc625ae7d9352d5f0d36f093c9686e36","sha1":"b697f38e124763726806f03c5e979759df88bfd4","sha256":"3ca946b4b80d35f28283cd93264bd6ce812dde4a8f402ffe2ee8ec34972b5cec","sha512":"b49e94fae799fa2ed2d1ceab167b2d9a38fe2d884ea727c2454ee8880a8debbb7bd617cdf3c3439f8598ec54d20cd1e3e4a2d5a7fe5f961cdbc762daaf5f2c72","ssdeep":"","tlshash":"55112c015b50216df53da3c7a63f2efca910a661d45029ede461de7984c19f385238bf","first_seen":"2025-10-03T22:46:16.641681Z","last_seen":"2026-05-01T12:40:21.626395Z","times_seen":51,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/JackpotTimer-DcWVJiLf.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/JackpotTimer-DcWVJiLf.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1231\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eRbMP84W8fFgn2wTOZj3%2FSZUtRTDR8VaY7Rpi6pIbpjxWUr1zk%2Fd8jdMG9KpIeY6EeurV72o%2B2WhLSsw1I0O2jCLD3Jdjv3nmM5ltIRZD0TdVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28471aff2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3991,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3990)","md5":"c34cf87b44c20d7e6fc42ddcd4de729a","sha1":"a60aa6dce2a01309ef6351dec7366c8e780004da","sha256":"c3c1ab89cd1b9fd9fd922a9c87880d89e4d2a7cf3810579f5871a6b22dd20a06","sha512":"a17f6ce1c530a33ad5eb6968fa68b188a6ac0a58d80a3643b3702af0686541ec77d8bea0b4be55172e36444e6eef72c7f74e44386a7a6ffe7fa47314e70ee7b8","ssdeep":"","tlshash":"2281ab08d896fba9eca64883587f4038364f0a69d7a844f8c0fde9354d6c98f760778d","first_seen":"2026-03-23T12:48:40.39772Z","last_seen":"2026-03-23T14:49:47.215619Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/PopularMatches-DWx3UOYn.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/PopularMatches-DWx3UOYn.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470998; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1850\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZSdSGtULSR5sFf%2BDtcisiaIkg7Bd4mWBwUM1at4ZyozSab4WmXz47%2F91rtMFe3DZLgtsbSjjF49RGiZN8kpVzcugHSm4k%2B9qHs85s70bfvTMXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28481e002f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4143,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4142)","md5":"e7a433026ebab6b5e50bb900c4b3e062","sha1":"3a3dfeadada5b7b93fe8d81df37f025168fad263","sha256":"9b3fdfcf774fff4f9603c90e8232dd304d4ce79351aa091d566868e4e61de915","sha512":"17b6ec41e561910ff697d1eed0aa7c0795724528181432f53fec4f4397fb7a8fbee78e9ad352d703ea68dcb563004c543d8fa4dcd0418315dc8e8ed9cea17b64","ssdeep":"96:25i3UVgYbb1pXpElO7/LCHf8aM1kG7+pwbo6X6Mq49nqH3c:3UGY1Fm87zCFog0oeZqC","tlshash":"0981d75fe05cd2b891b6cceaa57c9a10453605f9a3725790f4ce03b907c9681922ef6f","first_seen":"2026-03-23T12:48:40.29731Z","last_seen":"2026-03-23T14:49:47.19535Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAssetImage/692ed6ba-e569-459a-556a-776476829e00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getAssetImage/692ed6ba-e569-459a-556a-776476829e00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 628\r\ncf-ray: 9e0e2849bc6fe9c1-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfaRKjj98wG78-Q94g8ciN3whHfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=1019+1 c=0+1 v=2025.6.1 l=628 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"07a8ca43077147f4b93899efbe31ed8d","sha1":"bb87180866adc635991e4867c8222fc4387331ba","sha256":"b22b238c613c9bfcf13e8340213b734fea3bd0b9b2fe67648e3ba6decc104e89","sha512":"6d9a2235c65c224e78bd78025eacb630cca9bc9c4a838fd540de031cca2e8c442460eae186359cb98dcb1f1eb867414c6b5b77c78a2f3e1be6f6f36b254111c4","ssdeep":"","tlshash":"90f062be0d21c29ae04842881a0c6c5da472a9b9fb4424c4eaa5f7a67c0319433a54b0","first_seen":"2024-06-15T18:00:08Z","last_seen":"2026-08-12T02:21:48.822267Z","times_seen":2323,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameListItem-zeZgtcab.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GameListItem-zeZgtcab.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/PopularMatches-DWx3UOYn.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471318; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1509\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bAs9LLVsP5RBYxvOeP%2FwqnQ72dfyHZzU5D3JhUyTmAIb4UsWEWpu9L8sv1H%2FpEBFQe4%2FYqjhYBh55jccn0V9J3c0rg6A0NdS1nISppwwzhHxWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2849ebd42f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4485,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (4484)","md5":"dc97c09e995083be87af3872add9861c","sha1":"943e5e82263a837692a9878f865227fcdea6e3d8","sha256":"18d0193b1fdca2b031f0cff8e09dd0a040c8c0b2fe03462afce8bd705aa075fb","sha512":"c201fe72b9f04a451e4e0a4cb91166e365a3ca89e78a23b91f534cbeacb8a28605bcc347d9f2a5bb0e06e5a736da71090147384c6e2cd445b368b67ba27749c2","ssdeep":"96:u42XMSLe0MMmodDlA972VYtpq8NoYzumJrOE:7epaqg972hooYimj","tlshash":"df917549e024a738f8379efe71699719f1310e8e875b4bd2e15e43690391390632bf97","first_seen":"2026-03-23T12:48:40.609039Z","last_seen":"2026-03-23T14:49:47.240149Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/WagmiConf-hdcVY1tR.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/WagmiConf-hdcVY1tR.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470065; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 33247\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XZGTnbLArKlr4uQ1IDoFxjAC9F%2FCQiag8I9QEjeN4moT%2BsOEGPSIjJPXBfJiS1mV8HQGdrxYHhmas4i2Hedc7oWXvaInFdHsyyca6Y1ua80tCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2841fb8f2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100979,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48215)","md5":"d9a67fbe6ddd947fd589197dd4add431","sha1":"04e1f6a83784e34d0bfd065b449b7d75bd2f0f39","sha256":"537b74af8fee027461b3174e04db51ef96ed6c992747a6e5f1eeb2ecd57d9db4","sha512":"5188f717eced8a9b9ca6611d9532eca5062fbf928837056a7b7a9445761b46d53e00b377a3998addd43a28f642c986b24d82e87b55217d844f850dc3366fe9d5","ssdeep":"1536:42Caz30CdwD7ZajZlOxjMij4Yx6uxO7kaUhvFSEy7XUF3waG1RGYBsEUt0s5PIAT:pCaMRx5xO7TUqYEUZ5PTR1K/XGl","tlshash":"05a35ad07196b46103a74ae008bf440bf239ac35200e465cf269ecde79b96e99277f7d","first_seen":"2026-03-23T12:48:40.300203Z","last_seen":"2026-03-23T14:49:47.28359Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/Notifications-Dn5RLrQT.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/Notifications-Dn5RLrQT.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/PopularMatches-DWx3UOYn.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471318; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 569\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2F7BWVyeCuEkioq4gw6g8%2BrhDSmdIHa%2B8AMmC5FIRRBY0IEgV1%2F39HtZi%2BjJouJEiaACmT1U0yl7PiQ7WIU%2BBLjFZpRNABVIM5ANoBGhkWwZ5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2849fc222f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1112,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1111)","md5":"2c303a0fc4982d1fdc4e77cfe6639709","sha1":"130b81f23192f84e0f1703205599ae45334e8526","sha256":"307da9acc2f5b0389ed49579106722ca9f703fcacf8913ab3cc7b5cb25a86a6c","sha512":"6ae2b52ce3644fb6c7a7115468c49ac9afa193c60e76235e1fd4bd05850c4ec742aa287ae153994369fabbf812f84372b30d73a9b0a7747f7f7c3d1b7ae02e04","ssdeep":"","tlshash":"0d2130df64869afc292144f5431b2a32703708187529456602fb1d2032ad70ad61fecd","first_seen":"2026-03-23T12:48:40.325745Z","last_seen":"2026-03-23T14:49:47.214021Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1060.com/api/public/v1/tur/partners/751/components/header_info/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"go-cms.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/header_info/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: application/json\r\ncontent-length: 402\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nset-cookie: __cf_bm=hdWyGTaK_R0N.u6k836tl7AokMrROyKCAnnk6Mfspks-1774276471.8523839-1.0.1.1-_1gZ52HhpfXeAlHPftmucEEPW5ldR8Beuq6xehzdLjCFashFfLHkqC0TEiKxzOOjacRUxYOGYe5uBFceIKxBse11QXyajQHyaoG_OCnUSSpgJUAAfOaXIejQRLcq3uY_; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UxaPrA3k%2FSKATfxlkxkxNMEoz5Ocn57mr68Wbk73cSQCExUDbHdxflfA2MnEpjK82pKFKnPI98z5PO6KKA4uYQ6fNFiKsGqJGIyiCC21IZSJbN5dcBY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e0e284d1d9ba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":442,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"31eebc3ad38a765daada564176791ab8","sha1":"4ca49baf4c7ac30b244682db5d5d21bd6f555767","sha256":"e7a880dfe8126f315ed8dfda559672fd8c4a74972a7a1b2fa252c02a415365ca","sha512":"801c4a6ae61106cd113c1c2bcc26da7f2a7282350347606961bd6396a5775e6dbf27ca75626f95cc30ae1887971248885746b4b6cd46db603a2e1aee45af4266","ssdeep":"","tlshash":"e7f0dc36972ec52467504290c04f383a185e028cde00ee6c999dc37084e8379a1220a9","first_seen":"2026-03-21T17:26:39.590565Z","last_seen":"2026-03-23T14:49:47.305223Z","times_seen":7,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/281/563815.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/281/563815.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 11747\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Apr 2020 14:19:49 GMT\r\netag: \"5ef68916fa13d61:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 14:33:48 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=6oseKK6nxIJJS6xZYMgQhdUALT.sbg7PQVagU16Ewwc-1774276472.9800775-1.0.1.1-nr7paT5m1J1xNOrotgj3KoRe4F1Vmq6SMtsubRokpkb68rHlnumGDwKmnTMvgHBKD7jxN8SwVAzq5WRkzCpvGuYxK0LVXN5AKI4uTSQRZXDGLSKXCIogthKo81CnMRTZ; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oo8Q6ZfODbLTX9Q621Aeuct7aw%2BDzU5s%2FiMuSSOwg5Jkt8vfOEFZNSkw96gSVupYE6w2ph6j2f7Gsb%2F1WlYeXjyKJNovz%2Bqe9NtBozaha5IHgAkmFAwjrAkgV8Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28541aa50883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"7eb7472dc660dc7f2d5fc2baf3be7176","sha1":"2a0f8a597d0c539bee57e962a7ce260f05faab7b","sha256":"5c47032e82d36238db9fd237f9584c2f0b045a0cc53e385a3926e8aa6af389be","sha512":"a3b43bb7b9c0e0b3b11c372bc2fb43e77b36c5d01a42d0072dbe9562adfef58cfd580e7e7bec4c137f756694c5a83a5a93ff2ac996a7bf8cec3279464b7b1a81","ssdeep":"192:Pp+t12TPYanxOiaud4p4zHFiKNVnojdHSYlohkB1ywVN63OMgXgt5/Z9cO7+Q5P:Pp+KTNxO+wGHsKrMEYlohkB1DN+lXn/H","tlshash":"f132d085b7bdabcdc10c0e3659d0e815f003937f5813c9258dbac49c2ab9827ceaa907","first_seen":"2025-08-01T03:40:47.521586Z","last_seen":"2026-03-23T14:49:47.181134Z","times_seen":5,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/96/193760.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/96/193760.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Jun 2022 10:55:59 GMT\r\netag: \"62b98cbf-9a3\"\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=I88hRR_cpV.O5oPpCnmtpRYZJYZ332AtFM_axMA0s_Y-1774276473.000184-1.0.1.1-o1GJvmr_ZyQU9w71nwfKuhdQMO2Xv_IA8KvoKhERkJ70h4oEB.OS9OCTfzUtyBaasNo1CCT.GoFJuSbsx1OGpEz3r8HcurINSsKLfpKu8ker4cAc1hiaF42jRbnOMf8M; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hBNDJ2UdrF338AlsZGsnSADOHxHfNmA8VZ7LK6aO2CCzKagwB64PcrNb6CfO93OOIhNH6P0BaJQB3INLDK7B2QPBDNCD7jNXO4Au7AaQjWeIeAGN%2B4O9Oj5zVAg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28543b700883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"87af8083716421c45adf7b89c550fd95","sha1":"2eede979dce324b9cd8c9e45a4f1d89e27c74716","sha256":"a748f909eba7de62cc2b5325d56fd19af99dde087b3e64d9b759771f9667a356","sha512":"d28a590f64e63a3c78c08af9e4a0ea4655978ac7d5f327c10664f2bbec15013c80b735f97abe45164945e1d95a9a611dc3cd71ff084450c4c554ec3f72e81d07","ssdeep":"","tlshash":"47512c2db451c5b1b0ad894534db503397230cc5eddca7a5ec4e642a0d2ccd9609dbcb","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-08-10T09:12:16.484033Z","times_seen":221,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato|Lilita+One","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css?family=Lato|Lilita+One HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crm-lib.fasttrack-solutions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 23 Mar 2026 14:34:33 GMT\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1586,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2f31f582a62929942285136edb852eb4","sha1":"ade05009e3f52242452d23f325d0d60eb2f4945d","sha256":"86d1d33f6f9e190954cb9cf8f930c7ce03e60bb102b64f2ce0baab352285acab","sha512":"2e4b5ff5cb64ede4c3e63e2477f156c55597e1c3ddd83d888fd96c66bf7cc6716dcf522fad19cdde2a4a564f530022feaff488500797d01f3673e52e295ddabd","ssdeep":"","tlshash":"6e31bf92097ba80497930dc212ce7d32ef1e62406845a825afff18dcfc67c699362b0d","first_seen":"2025-09-20T10:36:49.753015Z","last_seen":"2026-08-14T15:14:21.929995Z","times_seen":178,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":53,"dns":1,"connect":8,"send":0,"wait":30,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/userJWE-Dz89wiSI.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/userJWE-Dz89wiSI.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/FastTrackTracking-DJnY4OPd.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470775; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mSv%2FHrS55cg8atA%2FhSYLI%2B3Zb9MBMJFzQJHugBHIWOXdMYzIPU2d7BgClK73PApZGVOmhwumItlrBrRD70pLmuNgetTkHowkFRuLmpE%2BtR%2FDaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e0e2846faab2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":193,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"504d26b7890ea7d36082cf36bfabaf08","sha1":"4c1db5737654dc118b15480cd11e0eb4c932f53f","sha256":"65ce130bb19abd340409952394166610faeb90d4b4b9fa6e694b54cd33bb7ce1","sha512":"d1693b55b67ddcac46911748cf141604da4018402d203f4ab36ce4a7170fb59fc7637b61144ea8ad1895735bfcc3a4c2c5c875ccd8956d218845c786dd121114","ssdeep":"","tlshash":"b2c022db0cd811f7865828942005dc12823039186298d3415b0883aa6a9100fb20ca50","first_seen":"2026-03-23T12:48:40.638223Z","last_seen":"2026-03-23T14:49:47.326634Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/CasinoPromotedGamesWidget.C4EXhwOE.css","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/CasinoPromotedGamesWidget.C4EXhwOE.css HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/tr/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470775; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 662\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:38 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OEqBGH480kbJZVaRHardffjAdZlDC68oiiEW8qamHW5lcg%2BfUaHMpS04HMGj3JXxiMQhIDeTvvzfxiRWsen1vYt9W2EJ9RtEMIPWIoEvZR2v4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28470aed2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2813,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2812)","md5":"09fc6c8eb905c21c7a4d044090184cd9","sha1":"0a478ada055f03e4574894d8fd6b86ed30d5324d","sha256":"d1f596a53ce4b0c43d20611ff931c0858b5d6c4c987b2b546269e639543dc878","sha512":"6811084eefb8629224c5ae7d6806c7f2b220d131a02f0c1a0c44067d684da4c1676d4aaccf513bcca338af6608ba085696056a3b70ebd6274ca6992035c3772d","ssdeep":"","tlshash":"6451250f445b273af1134e60a2bd5ed66acb491bca3b4b7cacd86157c3096c2607397a","first_seen":"2025-12-25T01:12:57.08487Z","last_seen":"2026-05-26T00:51:05.438146Z","times_seen":291,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/Casino.CL-gqDdB.css","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/Casino.CL-gqDdB.css HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/tr/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470775; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 6097\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:38 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jChwQMXuQCiWw1fbhk4nTs1HPk5AjUBjQOmA%2BwLx0aqqFr67HAVaROWZtfHeKSEpU3Vilp%2Frt7pCvjmurZyUlEIINk93tTYCTNozm7nLlzIRKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28470ae02f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37316,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (37309)","md5":"71880e85b009b283f2d874f72eef5e21","sha1":"3f7bcb2e5e6d822c53333b2decbbcad2ac91a93a","sha256":"30ac7337bfd7ad91638db406da528bbb78a56bbc1dce600fc93605e0cd19ad81","sha512":"1c06cd66731c42e50c8c9e788dcb1bb619fc001a81276ebcf8f14a46805f7962deb31c338e44087a71c53cfbeca09203abaeaf61d381094c7656877219584806","ssdeep":"384:Opo8j6E4sa1Hk9eeGKNgyGGFPwPJwWzY8IwgrOl009HdeVz7qQXFDpNDFb:OZj6E7Ie+TIIgVz1XN9b","tlshash":"34f29673961923bc75b796527ac0de9ce81c48b9da232641ac967237c3c7d992c307ec","first_seen":"2026-01-10T12:08:16.381261Z","last_seen":"2026-03-23T14:49:47.199808Z","times_seen":8,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1060.com/casino/getGames?partner_id=751\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026category=406\u0026limit=4","fqdn":"go-cms.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /casino/getGames?partner_id=751\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026category=406\u0026limit=4 HTTP/1.1\r\nHost: go-cms.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: application/json\r\ncontent-length: 1737\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=yqJ4XlDrbktV4fwuy_KV9h3RTkxwtnhYAAopdQSJkHg-1774276471.0524788-1.0.1.1-GQmZlgZa8w7Qpq7rKwibCc33keQrdIkm_5XQzjOgkj6CTNgrIz8s9gEMjNXZfNcV1Yygq3a5uq7JVQD659Sy3TA3E_z9XZcXyHlqJdbQwsIK4H7Vzdn7tIPMSm49B.37; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GLi8mVG%2FTZdil2f%2FHaWQNMx0r4dZ3kyI4O1gqDvCepeTkhiMc42D5L6eP%2BPJzPW%2FG2RVgCeVmWrl19xPem9MCsTtXIrYEcJh7e5kDtIvAL2KYAcXhnc%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e0e28480d615a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7410,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a61cd0ff027f7930ea55bf5d669bf44a","sha1":"52c54236c85c2536f4005befa952173cf956dd48","sha256":"b9c7f0c067aa1442dd7b3378fdbd1b52957f179485e5f30d8bf3bad698409a18","sha512":"7d7094397e369e2d778746ab46dbc66b7b39c102498218aa24124e626f318586e27fd52eab950402d0510d84cff4ceb5fd01efb602011dacf0d20f50676c84c8","ssdeep":"192:I5V5MEiLFf2fxHv5MecWz91We3WpX0x5GC6CoFECZMQLaoNd5MntG6dGDWs:65v5x2D259Jub5t","tlshash":"bde133266f08fba61f55188128523d4edcbc5fd39d119d804ebee9be02f119106b22db","first_seen":"2026-03-23T12:48:40.646126Z","last_seen":"2026-03-23T14:49:47.209378Z","times_seen":3,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameListCompetition-BDuRlusP.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GameListCompetition-BDuRlusP.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/PopularMatches-DWx3UOYn.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471318; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VkkfOCRvdFgsAY9HY129zavt%2BplYZi3P%2BjayyMoNpZUjS0vAdPMBRjtMZVsYWpyJrkpmyR9tVF2SN2GkzCJPPN6YWJ2QR6IoL6JQZEIknCL9vw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e0e284a0c462f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":167,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"8c7e226c4056f027af6fc99b68e93b69","sha1":"f9a0f7b02bba58c2fce021f58c56fac8edd2600f","sha256":"38606f5f3f9bf8a4a1355e11710b9ea0b341522549260843a1ec0dbb59bf4176","sha512":"1bab478cefb9b1e51be7d592ee85eb9fbd3cb8800c320a9bc8fa45253a24c8ac0609b44dd69be673e327f018f0bfcc1bf018717e4c942c023d75123d1d60ca92","ssdeep":"","tlshash":"0bc0c00284a44bf5650315d0072460010031803ef2f441c0c02046014c3015ae00edc9","first_seen":"2026-03-23T12:48:40.354399Z","last_seen":"2026-03-23T14:49:47.214559Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1060.com/api/public/v1/tur/partners/751/components/6714/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"go-cms.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/6714/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: application/json\r\ncontent-length: 49\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nset-cookie: __cf_bm=c9VVDrX6N8ZFMbfhUSrMHDJmFxBdy03HoOAauYNUPbU-1774276471.8540187-1.0.1.1-GcDkm5ewwwBhqrYE1iy37kUu1PlZOfcM1VzgIH9UBp57LWAKg3uEmprMBPr9U0RHK60_l8jAAE6br.Y5CP9Hye7zS6N_nzkREcBP.oL2IVzg0SsVR02EGhoCiVtDXNq9; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sdBXdoUL9WMjLpo9mCM1VZtV0pkk4v2Ia7XZ9TYa1s4Ti0YFpb4XGkaDQAzNd5mnzCUJuhKSR7HYDAW2g0HOQTk8WZHOsyj4wxK%2BRZYOIU7PldUpNcA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e0e284d1da6a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":49,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0574eaff1e45adea018a5aa1e9177f41","sha1":"a1bb710af34c53bcfec01a4ab8773c2ae5877b28","sha256":"2eae6bca13b339eb6ecdf941c29ee842a5788b210f695a10907dccf0435bdc8c","sha512":"38b7154aca04a476a5f13f581f842c1f7c28a078381e6d1483e28c559b5742c48c423b193c7cad9d64ea2a4d2d7e8ab04637dfe4d27f71284d39fceeda34a263","ssdeep":"","tlshash":"569002011e059471b4022145412e9d4125b871125110402099dd57248b10121688382a","first_seen":"2023-06-07T21:20:12Z","last_seen":"2026-08-16T22:24:37.516569Z","times_seen":2190,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-app.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/js/fasttrack-crm-app.js?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: jD3YWZG5NtFt4BcajB7OMpiBQ.UUxxmD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8CAPM6DIfXkdhWM%2Bi0IO3FrfpJCVhYNUx5aguQjSJbEUC7OuzBSLDOPbepxEVxrwlIhoCOY3HBW0EjVZbug2SOqmdHvdY%2FMiccuG8AD3%2FQXPA0sQo7oH7vmNbUzSyA%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4838101f07e2dfcd1db4abc88031f082.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: ytPLd0FrObA19TUAvVRHypLntOuYVsHZus5Q8sXLJSes44du-L_wpw==\r\nage: 6412\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\netag: W/\"c2b96460440b1358a43a511913fcc46a\"\r\ncontent-encoding: br\r\ncf-ray: 9e0e28556da0fb58-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":75107,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c2b96460440b1358a43a511913fcc46a","sha1":"815bc669e0c05413dd3618b44e995de5200098b8","sha256":"6a86bcf9466e23eb5dd702ffae4b53f730cde0c3a160ccfff8afca7169cd7c98","sha512":"64c88dfbdb85e2b328f8e690a4829accddbc943dfe479a4210ddf28c872f5fccedd46f23c525e2653f27d6e3d24aefaac7d9500f8027c0f08ab2be0abbe58d13","ssdeep":"768:HQzjpSkGROiRfEu8T3eSwKo2hWN0Kh4yPaw6ANGp2u+A47WFfVVoO4kC:wHpSbROiVJ88hawKV+A47OVo2C","tlshash":"4773b88db1d2badd4de32021535b3604f23b1974542bd484f7acedd52a28b0be227b6d","first_seen":"2026-02-12T21:09:52.719393Z","last_seen":"2026-04-14T09:08:05.884309Z","times_seen":63,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GoogleTagManagerTracking-C-Mb4Lcd.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GoogleTagManagerTracking-C-Mb4Lcd.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3895\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wvbsTUa9qU8iywglCIVZIf1IKqVq1LcC4GTkflQUDxXZ2m3RchvQTrLD1WewdEPgH569Ak7oUCJUk7k9UlSZTWGCruY3r5UQBO1nu345cbDDSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28454df02f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15159,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13873)","md5":"e5b1aae3b31cc6810dd6fb0c57df8e3e","sha1":"b5297b43338ea1961c624b06ea02b3bbee1db10d","sha256":"d9a4b7fa85bf72dac586ebf819ea1c005c2be5185b93143ac15d8c437ce301d8","sha512":"2cba15c9a407c751249731946c8c1684704e8791dd01f7859993c5a1da0f5ebd6c742b97568049673f77ca2bcbf371f3dd78bc77a754417c0698a047e25e2e08","ssdeep":"384:Y5Kaah6ftomMGxGLzP+/0dKRC5kEkMkMkokcgPFXGByxhZ2:SKaahSz4LzW/0dK+9FlzIcAxr2","tlshash":"7162a7e7faa918e0a57d5ee81f9381c239b5756af0814070787e3c0c237ce4af1d59a9","first_seen":"2026-03-23T12:48:40.335424Z","last_seen":"2026-03-23T14:49:47.180244Z","times_seen":3,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/BetslipButton-BtoraXlt.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/BetslipButton-BtoraXlt.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470575; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 285\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3r0OEuXJC95RS0sf3B0wTEF2KtwgeVhh%2FEl6c7afAIswqoBJ0St1MiEGz5RBWtlOpKqCndMwBzDV2wDA%2FDUe%2BOscS8cBi%2BA8ShTQBbWFN7ex2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28456e442f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":418,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (417)","md5":"06855a1e3c0f37da0d0b04a96020594f","sha1":"74fd4361e76e2f94d8e661f08aca1b5225fa8422","sha256":"d181a076ea651d38c9809e24f427508a277339684199e1f899804104c5935c87","sha512":"e948e373af61fa504bb82cfe80e34ddf084c924dc30b882f5fabb53de23938af65c551ce5488745a38db0a0a20b381f787cb982482ad8117cfb11de9e29dc1ee","ssdeep":"","tlshash":"40e0f1c7c94cc1fa4b9219d22102c222382655bca348f58180be3cb23fb4989c82f93f","first_seen":"2026-03-23T12:48:40.382231Z","last_seen":"2026-03-23T14:49:47.311634Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/13/27589.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/13/27589.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1662\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Apr 2018 10:39:02 GMT\r\netag: \"1db5b7771d7d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 20:36:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 64693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=jpmLFWsWhlDjA5lL1dnTret.UQbdoPpnocIOOUfxP5s-1774276471.9421043-1.0.1.1-lygU1s_YEeXeQ8er8WFO7D2Z2sv1UDs7lwQ3Lh3X5XBvyATHg3exreuwiQDms5Iq8FZLV9e7rohcS0PddilGxwqpPUJ0XCyaMoeXyWh1AhThVk3VEbZK5MGQsk0gvQHB; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NFBKtdV2cVcKHi8Ad5PbH1w8x8biKNFN7rBW%2FZjh%2F%2BwYBHjhGm4Qr7qPTnNaim6YCYDJRkR0v1r3ac2l2ujK9XZgLJFvjieWAA6HktFCjiqXALwZ%2BJVyS7AT5Ek%3D\"}]}\r\ncf-ray: 9e0e284daaff2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1662,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"b16f64e207e4368dede3fa6b06ff0e5c","sha1":"cc79b7af6a799d1c4dab98341c43a96638ae1588","sha256":"c28f5b69c14fa6cfd0ab8cd0cb5e5c6cfca7442268ad7c90e055104202987b61","sha512":"25f8724eb3ed32e6fa01a80126d735644e7c9c447aa30e69e0c43e877108349abcea5b47e5df524bab0f597fda0d6206bfc256ecf563e2c195c6b196f9924043","ssdeep":"","tlshash":"ec313c981f2d28bdb7c08d2289704853b4fb57d55dc33744273dd244ec886b97179790","first_seen":"2023-11-04T19:13:32Z","last_seen":"2026-08-01T05:50:49.443715Z","times_seen":499,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":96,"dns":3,"connect":6,"send":0,"wait":13,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/788.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/788.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 756\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:56:06 GMT\r\netag: \"3a3febe3725ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 20:36:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 64693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=SKHfIbgmq7RYBVXb8EdUqVP46cRqr6qq3pme5yUrFRY-1774276471.8839555-1.0.1.1-7wZeLyAxQ.qEWBocxW10B_DOnri2g8O1iW67rFmxoMbotmpEvd96EIcz8CMNuf4abgLj.w53RMFD_JMNxrMpGPo0ZDfM68E_xmx06MwgRPho6uDrKKnDJmprR5XPCapw; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2vtso7jI7FDBDPkH%2BNQYHd13XhickwePE%2FSk9daH8utlFUdfUfGNNScUoC1Sc%2FCLTyNf0rNZ5syOtYEkSadw%2BBoGgbXOCmnV5z62l9tG1Esyx0SAaiATqbFKLdI%3D\"}]}\r\ncf-ray: 9e0e284d38922efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":756,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"9934b5f296a319b76877377907245875","sha1":"8a66d4586d80a108819eafc549915ca5047d68f0","sha256":"ad6a3c0ebf58e8d1b54dae6ece731bcdcbb1da8c7f0ed1d1d738aeab44c98cfe","sha512":"5f55affd5c3889e3388a771c0de579730c1e0e84806d7f9e790bc7dcd010788d89694efb45744432ecfd2c7c2879f3e2a593179e687681bc06e7242f29eb39d8","ssdeep":"","tlshash":"de0165e29108eb00aadf36761bd80471b9a5a57768973c0930f0f7226e59940f2c1eae","first_seen":"2023-11-20T22:12:27Z","last_seen":"2026-06-03T19:17:53.443154Z","times_seen":118,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index-RoKIdEzn.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/index-RoKIdEzn.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1301\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GP1Dz6L58%2F1TYGrihoVlC1QL3dYSRCo9a30pQhvYW5yjoScOiDqC354elgORJ8E%2BymLbne3aD68wu7TF3CbVzRUHtGumdLHbc7zYROoAYGO3TQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284d7fa72f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2923,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2922)","md5":"a6ba0618454ca470f4b0d4bf208356c2","sha1":"22638b0b37e9be355c896ad28bacdf581ff2ec9f","sha256":"61b39cbdbd7aa6c5398a95a772c2f1f0ede32c7325311303bde0e1c48f6a5b6d","sha512":"cb9f93f2808fecc323d30947a9a2a54b17eda583d1da8745756e8a126c35f34a67e74673a1480c1f2e82f469a7fe4ce149eaf7023a9c025be7489a2f224a629f","ssdeep":"","tlshash":"9f5111c76042d7b8afe708e6829b10b074374e5cfe1f449092be58864958792e36bf4d","first_seen":"2026-03-23T12:48:40.293283Z","last_seen":"2026-03-23T14:49:47.30159Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/281/563771.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/281/563771.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 8533\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Apr 2020 14:17:13 GMT\r\netag: \"5796b5b9f913d61:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 14:33:48 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=P5ZxNFut_XG.6NWgphQYIU0XoFKDT.vy4t.miJQUoOE-1774276472.982036-1.0.1.1-g50S5txVNWMG3EM800pJtbJYH3qMEB.w0gYVFr3Gxr3PP8yX8mQ6kaSoXy5FF_YYHXobAM6bg9XD9Dq4B0H.FBorj6lnYZRIKcu9IVbgKeXb9r6gFnW_oQYmAZLGke01; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FL50kZ0YIO%2FK9dtpS3b0GP0wU9G7ZMSvA%2FWpp%2Ft30%2FcAGXAlgcMkFWkNvprfafwK6%2B0ui%2BqpkVEVzAaHzUhp5UZHH9rkkdCICdsAyF4Uz5EUrvQbbAn5ZMLQH58%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28541abc0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8533,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"b4cf883347c00b2e4ceea26f902fc239","sha1":"8458dcacb304ea9b20ec262bbc8d226dd300969d","sha256":"61af6790b208db9bcfba1a97d136bd9f63b67e9bc522ab534f9776deac60db6b","sha512":"66f58bf2f89d633e69a9a0eb9f32cfb440a03383ae831a994da69d315ca30487c716c8b720abfdeacac322b08fa209ecabea77c5611a681aa693b75ae3a06d0c","ssdeep":"192:C4svwLMuPQCu6euiBp/gyrWehVuipALwjbZVM9wjGX9t:P3PD+fgyye3zLPfCwe","tlshash":"6202b0b7e97802765073432ed47b84978c56f6e2e173745f884ba70a0163ba7bd1718c","first_seen":"2025-07-01T04:04:50.702462Z","last_seen":"2026-03-23T14:49:47.208296Z","times_seen":6,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: \"af9830eef563b4df395870a483ce549c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 236118\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e28563eaf75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36092,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36049)","md5":"af9830eef563b4df395870a483ce549c","sha1":"2c678a245c7b8984569447c9bbfe182583ef7e56","sha256":"5d919993a3fe6ec4c27ec6696b643900c02b95584a4a21a518eb8809edf12531","sha512":"16416617f0c79b40d196c1a7df699f1e01a130e3df75a4f437b4adfc04fa666ac7987d080bbfe759b849bd81860e6bab5b2af02356a8814f0dd1fa9a64b726d4","ssdeep":"384:uTTacuVZNgxYe4fbgL3w23U3xi7vxEbXR+ziLwH0Lg26/tFTiBB6TX3DYC8:yeyna+ziLwH0Lg261F2BBCX3DZ8","tlshash":"47f2bef1f4b700c8b363c122c3d5f67c6459b770ca86ce92f427666c49e16a63581abc","first_seen":"2025-05-21T12:18:34.219676Z","last_seen":"2026-08-17T09:23:28.16703Z","times_seen":50056,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/firebase-messaging-sw.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:28.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /firebase-messaging-sw.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 510\r\nlast-modified: Sun, 11 Jan 2026 07:40:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 6413\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tDGpG1L6kITxlTeN5dnR7vTOW9gJQbuDKiOVUrUftXF1GxPGSL6ZeH9tZ6%2FXIz9fz0d299JsgWkAyaidlJglw4OmajsA9Fd6Gk35Vy0Xb3q35g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e283928252f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"b6d01c0cd5391e7b6a5ff465d0813103","sha1":"093bf5f4adeb46d6049d53e0eb9db7689fd77186","sha256":"5133ce5b94270ef5d70b312d46e149007029e2f78405ad3b88050b8e1f6b81e9","sha512":"b47850377e50bee538c991b658ac372da87e20abcdbe47ee443a13e676dfbe599f3459a9300c2123e80023e7a5d295f308b51eafc91da4403d4667f712f82ac3","ssdeep":"","tlshash":"cc21cb124be2f8231e4104c7679f32186e290d2507b0f5de61bf56b86b0a57b206bbc5","first_seen":"2026-03-23T12:48:40.613577Z","last_seen":"2026-03-23T14:49:47.298264Z","times_seen":3,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 180\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":180,"data":"{\"p\":\"68a472fefcd547192dde9e22\",\"w\":\"1jj9jjq2k\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://m.galalbet1060.com/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"Ax1tIpkueYdP8a6wWFjic\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-khwz\r\naccess-control-allow-origin: https://m.galalbet1060.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9e0e283e8ab19e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1214,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2b967de4e9f5db5bf2502302c75750d9","sha1":"dd63530d573788b1d442cf757b9cbd762796f53e","sha256":"2f8f0eebbc1f21113c64fd093282c588e6837111d4d409aecf3ba2a3f2cf17b3","sha512":"504940d7863fe21d3fd383943866f9a9f526705f8d5d09176ea0db592ab332bd171c72f1040178e4cfd918e95bb20362c7e4021a3817f2caffb52a4e447b22b7","ssdeep":"","tlshash":"9121a7061e147d2efa57575289013c421acc7be33a58d42ef2e1cc3638e5abd2c96877","first_seen":"2026-03-23T14:35:26.108652Z","last_seen":"2026-03-23T14:35:26.108652Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2688,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2687,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geoapi.21btcoservice.com/?type=json","fqdn":"geoapi.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /?type=json HTTP/1.1\r\nHost: geoapi.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V6znGHQLbDtjZjVgTAWu2xt0lX6O10MASHoEclxiytHBF1a2e7o%2BzA4DkmVveBR1EKqBNPRg1aCkFzu176uDdeKaUU6Ay0kkxRNV9uRNBS0hetwb1jhDhg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=QqXMzyyE5HjtLuiHGnEw7A.eT389GjB9ompF6_58b4s-1774276469.871812-1.0.1.1-YNFgZWkiroIkvEoWbWg7Tcki_pTlyDPaRQjmgd4VZ8i0WohqyqCxuJN42wypRL9FH5GGB.MoVectr1TkXjjweSHB4XmyFPVbnbIME_xNE5urxSXSOxiwJbcjfMYVFM4k; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:29 GMT\r\ncontent-encoding: br\r\ncf-ray: 9e0e2840b8d2c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":201,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"ae0c7b15f7b07d5287f4f56fc107254a","sha1":"dec4cfb67f23a362cf007e3414411a871f42f8b4","sha256":"e64d2e0a65cac499cbd1024efbfdd31a982c7a1d825de1b2bdcd6e4001e7854b","sha512":"74b1f188e6f60f077ee12e4556f5d70f415e2e0f89f8c513a50df271545efc9d30f25d65a4ff4acd1cf25c60d0a70fd5664bfd72608ac1b75237a02981991b8b","ssdeep":"","tlshash":"c0d02218184d8d8aae34c2882a4fa9331ab220ccc28f40c4828aae31c3d86ec3288840","first_seen":"2023-05-08T13:32:10Z","last_seen":"2026-06-06T07:02:31.879116Z","times_seen":186,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameListCompetition-BDuRlusP.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GameListCompetition-BDuRlusP.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eDRI1hZ9V3S4U3BYC%2F2yXKgIAeJIi8NBwrfI3UoFuRdiuyVAIe6ew4S2XaE62a4B0ldQb%2BUEV870PoIsZ%2F6x9aX4GoORZWVlB9hKeESmkXJk%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e0e28472b4c2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":167,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"8c7e226c4056f027af6fc99b68e93b69","sha1":"f9a0f7b02bba58c2fce021f58c56fac8edd2600f","sha256":"38606f5f3f9bf8a4a1355e11710b9ea0b341522549260843a1ec0dbb59bf4176","sha512":"1bab478cefb9b1e51be7d592ee85eb9fbd3cb8800c320a9bc8fa45253a24c8ac0609b44dd69be673e327f018f0bfcc1bf018717e4c942c023d75123d1d60ca92","ssdeep":"","tlshash":"0bc0c00284a44bf5650315d0072460010031803ef2f441c0c02046014c3015ae00edc9","first_seen":"2026-03-23T12:48:40.354399Z","last_seen":"2026-03-23T14:49:47.214559Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/0/811.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/0/811.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 6012\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:36:47 GMT\r\netag: \"e1241431705ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:47:40 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 6411\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=aNIpAMcpa_7HPGhnqKT9iTk9gri4..bmCOGKesm_ovY-1774276472.536149-1.0.1.1-97NBewavuA19_lY2jnFEfzkMuuSYnlsMJ3EGrZ5hgiBUc2pkLoSEG.Ey.OCngf8VqbqTMHJfvPS0fMavuraMDGiQpcw10.JzHtimwEarMXAK1ks2rc6NA5M9WVizSxQp; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yJMvQM8KrV7uaIaxwXMcpxikRCFcJ0krmVNo3FNeWTxP9Rvs5akQj%2Bd8rOZRP5VNyjJEh%2B%2FnqP8e2ClI0H%2FHan0kIXUB0TVXLX3SSBWQCzKU38XxxaCrUWdjVgA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28514a460883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6012,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"79a2f877fa4a1a8107f7e44d53bbf47a","sha1":"824d38ce81dbbf8c301db712a6e157294c5ae10e","sha256":"bb9f035a18d9d9db884b5f9672e93ba8d2489e95b72b2a1e12354cfbc9cfa362","sha512":"a6ae461d9e2a34432425c0726ac3b841a471cf0f9989c6e9bdffec81986ba1bcd3271e613d0c45e29b7c7c64428068752146f79bc2f19aa30cd20c73e5adb2b1","ssdeep":"96:RDoBoX/ku6epbmc9guqbWs6HfSdDuWTxbz2wOjFiXDQeVkoGGHUCys3IwLZX11r9:Rx8upxmpuq6Sd6WCjcgwU5s3TZX11rTp","tlshash":"87c19fe675a48cc984ef02b855b43135e4056e6034dea0386d7919ed139cd4ecee31b9","first_seen":"2025-12-02T11:10:35.995908Z","last_seen":"2026-07-16T11:43:09.348292Z","times_seen":5,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GroupHeaderDark-C4imcPRu.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GroupHeaderDark-C4imcPRu.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 517\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6411\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z8%2FjF2y%2BT%2Bo6jdL8qAPnfTmxxAZB8bscgjvqj5%2FH75kL7clFN69DV7mj9e43o53ucHD%2FWVsKl07yQtFccy8VldZpgUpPM1PINHI2zQmDly5Q8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28516cd42f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1075,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1074)","md5":"31d5bde46c82fb9e1b1426b023f46bdc","sha1":"26ef66e5347555a9c100905c1f923f47bc6b16e9","sha256":"ebcd22f24e5ac863b234ceffa5c246069d0b1b824f05dd2257e9f9982db1c8f5","sha512":"960bca447decde377fbaa10bc7fc3f86fa0d197993d5d0426f7be84f26f71c514d9ef7d127bb0a72048aac2686117da1672df590a10f3160b45b9cc5903bc259","ssdeep":"","tlshash":"ca111611e424f7a9c42785c2dd6e0015757d0fa8de190551d07e56336a7864d3a0ffed","first_seen":"2026-03-23T12:48:40.337207Z","last_seen":"2026-03-23T14:49:47.302112Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index-Cq3w_vEM.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:28.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/index-Cq3w_vEM.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 469533\r\nlast-modified: Sat, 21 Mar 2026 02:02:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6413\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jJtaUigICATwdf12a6By12%2FdG2lw6RHyUD0A7qDwhobTMZz97g93%2FdlgVC80bh6zzPe09l3uIKwrwMvTNRRGQlVdRYVXrnHMgpSI68HQiMzfHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2839281f2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1941052,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1081)","md5":"fd54c7be20e561dd2594e7c02109ec87","sha1":"3b3522f7714b6bd0c12ee122ee87de422f363a00","sha256":"89314578d9541defe6cf12b1e7582c6c973e369b421b4210dc4ad13b1d8424aa","sha512":"b317c7a61468c3ba119eb27bc036d1d37c009a3feb8cd8c8e5e42534de0b1472e93d494ed9cdca8a73a95fdaabd779bac690f0df94cd066bee1c7b87dbf6ecf3","ssdeep":"12288:vWixetVV3z6ElJFQQr/exDxhsb2Ll3TjP80h:+tVV3zdlJFQQr/eTh1l3PP80h","tlshash":"ed25b34aa6f628319223f1791e2fd4053a25890b1d88fc583b9c96545f4c83e93f6fed","first_seen":"2026-03-23T12:48:40.339428Z","last_seen":"2026-03-23T14:49:47.229218Z","times_seen":3,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/tr-CR7kcqQk.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/tr-CR7kcqQk.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 809\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NHIK1RSIOS68p62pnIhKvoLhQ7FMQjxzGZ8uNv25IM8n89RC234BzEksTtzQyWBX9euYMTq9sQiRO%2BsKZK14Co5Z%2FuTXZJBVFj0jJhVjW7PKbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28406e602f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1438)","md5":"1edc25f8a599f65710b27e0e9e2f3234","sha1":"334509d520b19648232ac177437179777252f924","sha256":"73ea73130879463621f043f68c9f459ab830734fdc449a46447080f82195bbbc","sha512":"134a51681657a724e32c85efd8c8365e185e424f61ed25fbefa2cdfcf46d94c6f8f32152bf6954a2cf5df20000b0bd42d7fe9785e2c66d87998ba0b4db476fb6","ssdeep":"","tlshash":"aa31744d2946eab287016987c92f1f44f41d2b087136f1659ba4d461bab09ee807eb3e","first_seen":"2026-03-23T12:48:40.307741Z","last_seen":"2026-03-23T14:49:47.313611Z","times_seen":3,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/menus/app_menu_751_tur.json","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /menus/app_menu_751_tur.json HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470171; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 1203\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pueSp7m3vwd3LaSOvZ9%2BrPjZ5i3A2dj0SkNqHk5UVYkBJqOg337OoewHhlQ61GJtWILqwa0YJTUtn0bBmiY6%2FbTLtJPi1VQEXSkvF2iAM7cdLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2842fe932f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":11704,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"15747d267ee7c64aaf47ab532935bf9d","sha1":"72fbadcffb9f506fc2bc06ce593a8b7f46d11c63","sha256":"291c9efbb588daca2b2df5f15819785012c63ac73c6d13e56847308bb0f53210","sha512":"d3c0a723e3ad6d5ac8d3bd0d3c9e5f9a9950d005d15f3f95e0031f6008a488fbc0884701d4ac7cc52106daae65e75e3c73674e0314606321b6c6f3aca58403ac","ssdeep":"192:SSkcUlkiU+kuSkxUdk4kvUQkZUcktTU2knk95kEk/kbkAkCUdk7kkk2UUkoekIUC:SvuxuvPtUi2k9W58Y1g4ZbCCQJU1whjS","tlshash":"e3321602f01d5976d3183e00bcc76d5b988d5099ac9d49419d4d8acecbda4afceca2eb","first_seen":"2026-03-23T12:48:40.583101Z","last_seen":"2026-03-23T14:49:47.307485Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/userJWE-Dz89wiSI.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/userJWE-Dz89wiSI.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kLRga6Dkkb7ft78sfXt%2BgI%2BHmDMAwciFE1YpnE4gwPqjkSnURcsq0K8vZxo6nJmnOW9gXum7v4DzH6chbszO%2FgMNo%2FeuZWu2J4jCqygNL2u%2Bmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e0e28454dd82f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":193,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"504d26b7890ea7d36082cf36bfabaf08","sha1":"4c1db5737654dc118b15480cd11e0eb4c932f53f","sha256":"65ce130bb19abd340409952394166610faeb90d4b4b9fa6e694b54cd33bb7ce1","sha512":"d1693b55b67ddcac46911748cf141604da4018402d203f4ab36ce4a7170fb59fc7637b61144ea8ad1895735bfcc3a4c2c5c875ccd8956d218845c786dd121114","ssdeep":"","tlshash":"b2c022db0cd811f7865828942005dc12823039186298d3415b0883aa6a9100fb20ca50","first_seen":"2026-03-23T12:48:40.638223Z","last_seen":"2026-03-23T14:49:47.326634Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org/sealassets/dc594ed9e7f4ca653efb3347ed40daa0-galabet.winwingames.io-486c6ced63392226b7bb98bcb3a47c5e200f727c81d94d94704379de531211a4683f102c172d4031615d4a731a036011-c2VhbC5wbmc%3D?status=valid","fqdn":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org","domain":"anjcdn.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.winwingames.io/","date":"2026-03-23T14:34:31.181Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /sealassets/dc594ed9e7f4ca653efb3347ed40daa0-galabet.winwingames.io-486c6ced63392226b7bb98bcb3a47c5e200f727c81d94d94704379de531211a4683f102c172d4031615d4a731a036011-c2VhbC5wbmc%3D?status=valid HTTP/1.1\r\nHost: 02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T09:43:02.208337Z","times_seen":17933663,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":0,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/SwipeableContainer-DtI8xDnu.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/SwipeableContainer-DtI8xDnu.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/PopularMatches-DWx3UOYn.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471318; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 951\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VDxmtAOYWSk2SzyDGxl9XkPnWCBadUt%2F6v9CuA0eiSyEMEEylxI1BH87703OBXBQEqBrUzDc3CL4esUeultXdNzw%2BR8q6yoIdcBQP9OKtveL5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2849ebf02f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1866,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1865)","md5":"530881318840c137c3097d1161d60f9b","sha1":"0e6ff33294721f93bb25dd5ae66f5c9b9de44359","sha256":"837d2df39326f7b2f491dfaff92d81147266df5d35b9b98bd2321a19c4650243","sha512":"d703e73d7f7964a647e2658413b461d61bae690fde3a4f8dc5ac89e394f74362b890f497b6a357279377edd7e91bb04c2992a66b529ab467f60b24238a19b669","ssdeep":"","tlshash":"1131b78ad07ada70f522405a92a64474b3bb33a4fa0809e070bd4c2ce73565df71edc7","first_seen":"2026-03-23T12:48:40.533641Z","last_seen":"2026-03-23T14:49:47.30913Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/803.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/803.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 732\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:32:59 GMT\r\netag: \"8f6c8a86f5ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 14:33:46 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 45\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=hhlNPGyUToPuJoytBrLQl6qfly7g7XgepNffq_rzPBQ-1774276471.8768275-1.0.1.1-boJsnvI2ijMgrAZjQHP24xHAdYQ4UCnfo6BwmdWwBu..vnNIBMOH5q9827kOVvIVrLjrxPjMXZ8a0ibrwoz3geeHLQDurwgD772__VbCZriiSF_kXj718AZLACzXr.dm; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KyFj2BcHaujNB%2B23Rco7E7Adh7xo64CQbQgLeVlrry0cc%2F%2FLnOcrogtEH0l1bhmVa%2F1RA7FuyWJ7w7EGbZsbsy7EZrRjFzQ3p7Xmi0gXAhg3LTUxTPHuNmwHhtQ%3D\"}]}\r\ncf-ray: 9e0e284d383d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":732,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"fbc003035733ef0d610eb7f16faf0f91","sha1":"4586092b7582e02f92c13853b2ac1311a95fc0b9","sha256":"865f6eeb660c672e6df6b65b48f8d8ea9a6f51873a3e199745deb3d69768092a","sha512":"5342acfbea734a78ae0018be14e6911f56f95ad57ec491220830daee75ae9435dbe1dd85744768c59f144a90956058f41606206d719f9f542b8effa855b0a70b","ssdeep":"","tlshash":"e70125f39e1ea648a13e1dfe695657736d59465db91140906768c8244b0e0b82892dc0","first_seen":"2024-08-19T20:31:49.104596Z","last_seen":"2026-06-05T08:45:29.268971Z","times_seen":87,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"eu-swarm-newm.galabet1060.com/","fqdn":"eu-swarm-newm.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eu-swarm-newm.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://m.galalbet1060.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: IalGnm6FKCVt5duro3Mllw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 23 Mar 2026 14:34:30 GMT\r\nConnection: upgrade\r\nSec-WebSocket-Accept: x4lpIAQpm5KGseCmgnaqd7tqMm0=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover\r\nVia: 1.1 google\r\nUpgrade: websocket\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: __cf_bm=gSPSH_YPGT6wuRZJOa._zBHpOZQ7b.HI.mvY_aUVADw-1774276470-1.0.1.1-c4WanWXkKDNCzoo_AAgdxaGsAN5.OaAtOm0aRqSCoX7MuZdJUQhoOB0U3raUNHhF5sS9gZB0OgxAbemZEEi5pKXWdSJr0VsehJFxChWVLMQ; path=/; expires=Mon, 23-Mar-26 15:04:30 GMT; domain=.galabet1060.com; HttpOnly; Secure; SameSite=None\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iPPuJUn2MxbL4%2FlyztXwcpsW8fZH3GpoL7tNUUPWD4XUdwx8%2B5uJ1jiIBxEQzHtqkrgzc%2FCNuKbsB6iDsxOg4uC9QKyylLYM6JCSVRsSoBnQpLHuvnPA89YZeRcvB9UCk3mN8tFZ2rXmOaU%2BtUmHng%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9e0e2840df4ca41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=517\u0026min_rtt=480\u0026rtt_var=163\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3124\u0026recv_bytes=1174\u0026delivery_rate=6983922\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=81aac73130469dc7\u0026ts=143\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T09:43:02.208337Z","times_seen":17933663,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":0,"dns":34,"connect":34,"send":0,"wait":114,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/AppSettingsButton-BNMcbAMQ.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/AppSettingsButton-BNMcbAMQ.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 260\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Po5m9FtsSkgcdN89OyMcNp9aNEfdNZwRqUVsyxgYOGlvksKO%2BZirg429dPdoiPHq5l3sqaA6zWvU18dWa2YXaOgdAelO5Kk%2FRnFhL3W82xGbvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28453da12f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":385,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (384)","md5":"10efddc616a357680413a7c3f1d1574a","sha1":"684c4466c147b9f78f610a76844fa85c98bb5f57","sha256":"91cb8d17acc6d4ca2d6a1c8b4985e9f2b6e9b6fbca59fb20869bf1cdd0536fff","sha512":"5d5b25b0cc52f27b48bacf62d852a841e9b09d59dfbf091bd88897004d1a9ccd36b008cec88141f63e598b62434d0e6326b5620b8005536c03279ad311e65de9","ssdeep":"","tlshash":"7fe0c0c791d6d2fb03e12be1c61bc1053e1a7c38c349950140bd74617af4186c15f66b","first_seen":"2026-03-23T12:48:40.541086Z","last_seen":"2026-03-23T14:49:47.25734Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GoogleAnalyticsTracking-CF5zzLSD.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GoogleAnalyticsTracking-CF5zzLSD.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4570\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AmCUAI8h1h34A298ai8lRo7g%2FGzcCywXj1p7tRE32Wj6%2FvF8OCYLyblbtTPpH43tefXRxOv88%2FlQj5xWDn%2B3IPACmchR09hvkCvpVEeW4MTCzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28454dee2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13704,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10208)","md5":"5683e733aa3682e9a5655632822fa303","sha1":"766ade6586d7930de614c2d4e02c960751e181fd","sha256":"8bbb4c1a596f0ab41e2d7ae47e82704b8cac186cfa1f96061cce9e2e3faac14f","sha512":"5c816a9e6cf101a5cb167acab598d4ad85e4fd63f90bc45cd957be351e9b80ed4d1962cb0cc93deface1a3db13336adf9acacfb7a06d03a47416ef2167612379","ssdeep":"192:S4WYceR0SE+m/CTb3bHXCT76hoxGE0VK7D6L7kBNrnPWh52Lz2PM7mBE:WYcoE/CzCIEP3Byy2PdBE","tlshash":"1552b55c32adb0b682df6054587f720bf1755910a458f480a269edf46ef8caf026bf36","first_seen":"2026-03-23T12:48:40.639404Z","last_seen":"2026-03-23T14:49:47.253461Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameSuggestedEventsWidget-BEY5dQnO.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GameSuggestedEventsWidget-BEY5dQnO.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/DataspotTracking-BwPyciEj.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470998; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1701\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fazn6efRCrckWTCo61EDhqgqViz%2FJWI3opPMmF6BhoKAC3FCEKBQbPVWzTIr4XAzXsMrhBUpor%2BGa%2FyaHe5wsphMYkdQ4tESOzJkPVUk%2B%2FPC7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28482e5b2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3726,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3725)","md5":"7345bbac091298f9e04a68c920846d30","sha1":"631bc084ff5ed3cf5771f38595bf4f0b89d1407d","sha256":"724cda46a4ecd30ae32f11cd4e6f3c0fcd3f2b5fbbc5bce5437de267a32f2b69","sha512":"aeebffceb93928dd362c7378214166d6bdd21f3fdbf3c6831d9c605ad11da45da39b8a9d28828db260586a8127f2fc802cdf73080a4e010e0bb91797152dfffb","ssdeep":"","tlshash":"e371d74ad010aa39a16345e81bdf3219103672b4b54353c1b63fca3127e5592ab5fbdf","first_seen":"2026-03-23T12:48:40.482802Z","last_seen":"2026-03-23T14:49:47.314658Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/MarketTypeFilter-BZbMG365.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/MarketTypeFilter-BZbMG365.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/PopularMatches-DWx3UOYn.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471318; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 426\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ry6L9gYmhE5x66EP9777oO36xRO%2BS3kzgAc7gTQGTtOkR2FIjuiiOI3vG2sC6cNALwBeJkpHyA493FQkA%2F%2FdFpW%2FwhNMB%2BEXtTYMOIZZu7MHCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2849ebde2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":868,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (867)","md5":"5f35170ee9978d2966bd15452d2b6d85","sha1":"787ece6ccf338421310a96658c32766d3b28be54","sha256":"e003b1f8d7897a3bc2eac6580cefcf1626913420915d7a43ecc3280fe5c057e2","sha512":"d0af2fe38994087e4e80171f5529c494b8261fd966958359627279b6893c56bedb8848d3a16e58bba934b422255eb95714fe31416c7551e5cf7a1270826d74a6","ssdeep":"","tlshash":"1911ef45f748e3bcf23b1dccc56d481893210aa99b2946e1e02d1e960b51986a22ee8b","first_seen":"2026-03-23T12:48:40.510581Z","last_seen":"2026-03-23T14:49:47.207799Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/787.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/787.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 780\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:55:45 GMT\r\netag: \"bce67d7725ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:33:29 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 7262\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=5gw8uGXWzR.uGQjw2Rl8T._eUaW4rPhx9usdt.xzLm4-1774276471.8823564-1.0.1.1-FS4VEvCOiEjPSSQLkQmN9QUyZpXDTt.2jZUBWMOEuJcc.cxAOZD7L4FrNJFk3qwF4tokuAZJgVRd.Blvz8JnxXrAGHMwLDJ.GgyAyFHcy9vqrekLHf3BCheuGDMUOSJb; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6FnnRcvGn%2BZok1BAkHSE4EQQkm%2FRFvEYiYzdsj0CpVIGWzcWBXryyutoqMZxMLWeX6VMdWbS4iY6dsKKUyQ%2BbkHd09wvAmVdWt3spt%2Ba3wZkOHAFoB0mXQPFoTE%3D\"}]}\r\ncf-ray: 9e0e284d387c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"215797c58ed29ea1f0801b737485b654","sha1":"a3b6015adde0a008217024ebfa146d5046ab7c4d","sha256":"cf1acffa44b88e2c84bf13ec578079a39cf910df9acbf2cb3eb8809e00dbc364","sha512":"0a56e5a669d105fad484477a6317e43e0f9fa76178c8cd91dbf0e265f3655001f2740f7c2a5c3f1cd4886155ec64d513baec4087eb0561588e4e170e105f04f1","ssdeep":"","tlshash":"060141c399d819ada96e9e7352fa19a4b0a711b61e680c5d3be5c026324519410b2ff2","first_seen":"2023-11-20T22:12:27Z","last_seen":"2026-07-09T11:19:16.729458Z","times_seen":52,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/821.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/821.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1278\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 09:15:26 GMT\r\netag: \"87f3e97755ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 20:36:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 64693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=VYmlT7vGLGRD38zNYIpaXWIV9q0fPH8JH.LI6.zDdSk-1774276471.8843331-1.0.1.1-vamCumL8A3uR_6L_DI4FP0fFLYO_YOLFrSrdj9UwwuBqeNtz.0SVzSnZhI0xlcDuzU0BjvIkRL8OggYOEDH0UCd8k7Um0nZVmG91RCWijy5GyTYeBaigpIMyBtNIvzNy; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8IUlyUk3aPlmtmOaf%2B02rTI7EjoX7bYaawTijQfssGj8%2F%2FqpjLdUQkszYRYPy71rb%2FCnmlTDvDJlUUIvg6M8c6jIT4OLvHCG7%2BNkYIiWbQvcbgY0nCGkLIbM17s%3D\"}]}\r\ncf-ray: 9e0e284d38a32efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":1278,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"1bd15102b94c69f1356a441cdec8ac71","sha1":"c065951f0f4469ec49e49d13ba785ac4b5a6ebec","sha256":"a91933b52a20c4dd39e3205bb7d8179f52b26db48fdb95c96fae2e0c6d8fa215","sha512":"d8565183758517b62329203c2b38ba8259b78820d0e0e01bc240f518b2612b74ce29bc1171c51dcc4ba74823c5e38ecb939a2e9be408cab279c5dc24ba85ec95","ssdeep":"","tlshash":"6a21e7e87ca9530eadf47c1fe00e2414dd3f30a79482c88d79195a71b82e020524b866","first_seen":"2023-11-20T22:12:27Z","last_seen":"2026-06-06T10:12:11.788509Z","times_seen":102,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/bookingBet-B87_JLwQ.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/bookingBet-B87_JLwQ.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1724\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4szt0dwpZtuGleLvBuraL1ZqBMvAbQCdT2jJfKinkh4htFLX8D4f4GuUYscaMmgozFRSVktHkWJ48nFBHf0YDw6yGaYTD7mPw4A1g8cQiwKdnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28453db02f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3796,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (3795)","md5":"99ccc64e7da561b23a46c92988276a6d","sha1":"9cb398b846e5aa2c20253c60f58b75bb9a95691d","sha256":"3d0ccb8881488de289b90a7e06f79e8c0fd389022563fa5edf92318345a60d4d","sha512":"6af695ba69344b56a71cd4de31d4fbbff2e6072c4c78d1db246740a8ea2390e4847a6198730ed7c1073c8a1d330b4cfdfec98dcb2c70da0846934dc97841fd20","ssdeep":"","tlshash":"3271e855fc5090baa7f2357df19e7b42772c6be871a19b409f6b8d0c40d084bb534a2c","first_seen":"2026-03-23T12:48:40.620277Z","last_seen":"2026-03-23T14:49:47.327153Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameListItemStats-Bm1vNWgi.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GameListItemStats-Bm1vNWgi.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/PopularMatches-DWx3UOYn.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471318; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1433\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H7xdTW0lNMyIe8hmzI6PXZCA8%2BjYQr0II7OQhq6vR5Crn%2Bu6bHqIvFui2RSXfUGFYA0ioZAQ0vfYxiuFasX%2Borf3vzZ0Z1r%2BPrlusKiFzLqlDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2849fc1a2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3575,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (3016)","md5":"3f60a0a0d328ba59bf948348c43a0d76","sha1":"551457eec97eacb140c81ec1cdabc40b0d1ba927","sha256":"3f05a290ce7982a318568937d38f30f92c5111b8ea96e47d79306e9ac0d82d06","sha512":"8de7e251d92c2d26c2dd6743535f334b49176acfc91c39b1dc61824554a25817705b1c02f28f97efc4dd5e0a8762e7760fd3bcb3b08377c2daee3a8174d5f9eb","ssdeep":"","tlshash":"f8717482a1309f7d75260cdd69af2a60202a0755e919c6e595bd1f3f367800e3327f7c","first_seen":"2026-03-23T12:48:40.302588Z","last_seen":"2026-03-23T14:49:47.291249Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/800.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/800.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 719\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 09:02:17 GMT\r\netag: \"2df5cac0735ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:47:39 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 6412\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=K77C76qZgLC2am5wWzNE1D71y.rjsrQWj3dkuEWPbNs-1774276471.8775756-1.0.1.1-Jr855uCSGU8WhPTKm7U5q8iy3Vgw0Kwqm8p4Kdydt7HBQfFB2YuKHPO1k4X2JEzc.c3JyZnBLzuhTKhTIiSSXMjDlq2eOSWJII33pnRBYunYhi.g6NYvOHzFk4552I5P; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PqlefYv4zAQo7qEHpDa0QXobP67AujpUWAO2UDAJ6B8UNJG3U0j5cjWMlhP2VGTAdlIwi2r0EEQN0j1Ri9Tv5YOONYYo%2BuawetDPbDYwp7SphmyNEBuCrnfdPSk%3D\"}]}\r\ncf-ray: 9e0e284d38502efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"6c850cf4782ec6bc411b1b6b3168f736","sha1":"7aeedc2479e757e6562ee1072e2efa17bdea1ebf","sha256":"5e9ab523696711f0a9ab6799c587ab5334fdecf28e1e542ee6aea641a2fe88cf","sha512":"35bf50611aa5bb515b9f30289a28ab9ca82e1c9d2fc37326b52998d4410208643a267e5bb74f3923e57a73151666360d1fa45b6efbfdac629a29d8e74c346a5f","ssdeep":"","tlshash":"9f01659428800429ac0b9417a9f77560422703f322c2159d156ec3a39d2b66c539e748","first_seen":"2024-10-13T14:30:57.249336Z","last_seen":"2026-06-05T08:45:29.268401Z","times_seen":93,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/1/2559.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/1/2559.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 813\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:51:00 GMT\r\netag: \"1afe312d725ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 20:36:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 64693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=1IxNguzGUdoI5RSezJSYLY8AaFHFALrljEmphjU3J4c-1774276471.8873844-1.0.1.1-Nxmw3LLBmUHbhvO4JC10uT_QVH7UYPT8PNZBfC6SCRVZDkQJEMInkPpvurG2O7AP0sm2WDdiZIKAw3Sd_Jdexd.T9LA883N56FurwbnfTx8hKT_6dW3G1JZYbcF4uRW.; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jn2LHYgu1rN4vliB7dqI6nL0o2kNjJuUmmHFkClNZQIqrFVHUj6XvcVrwq1f%2BS3nhHFQ4sTynKvSPL04dqsJfK5lnIJODRT7GpulVGf2MfqHiHH5ZrZOsqgb0nU%3D\"}]}\r\ncf-ray: 9e0e284d38b72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":813,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"10aeb0d457d5d725eda2436e46ed2b17","sha1":"34257fd6673c4379e98002f617de5ab1d9f69089","sha256":"7f40e101a134bdd5c345553e39a18a03ac19f3207427f8190bfed39cdcfe74b1","sha512":"a023527737e742c79ef7130b09d09fb2c9ab7822facb9db68a6947e4b8edc96f88c51da28a497be2102aee6589e21852d13b6dc7fd7a08fda83e150ce7978f96","ssdeep":"","tlshash":"4901c5452e2661b5c04c0cb3eeb0a04ac2a83ad2a9ed3e4edc24d3270353b4803c1a02","first_seen":"2024-06-24T13:50:40Z","last_seen":"2026-06-06T10:12:11.591755Z","times_seen":10,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/0/804.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/0/804.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 5239\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 09:03:39 GMT\r\netag: \"68a1def1735ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 14:33:47 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=7EXWoAm8RHWBVQSjYtMeB_rIZM9EzKCn7HgMSe23cgs-1774276472.5361986-1.0.1.1-W3MmMhlDH2Rc3GOLIav9l5w4xf3r008LdD0vwhA.IVADu4CBjpUfMUiW_56ztTGRGqBNeqV7.FGLRWmJJd5GOAAIGCPTg2_Avmuhj31QR6BH9wzY7tf.NgE53w_v3KN.; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uP1hNZTYcaOtJT67w9B5s1FMi4bKM1XwF%2BHiV3ieuXt%2BmP07oqLRGo4Oi%2BM7n4oGy8xstKDGdBXeaA0Pu00oNgeuNWwJb3CbtcTtb%2BzSV6ZBcgfgjKMHqr6aR5k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28514a4a0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":5239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"4fd41b21508ddf24ea56795ecab6f910","sha1":"b1fdf801ef2658a8be90794f7365d0260cd7f740","sha256":"d34c96605f299aac1215dd42239bd6c4e3c5e909fc27e1174eaea32cc8f3041d","sha512":"fdd46bd6fc27efdbbac3bab99aab8c19f17cb8b730de8cd27556e139ec9cc086318dc4975f343f860c22b63843a17b28bb3860ef6484117775820fc73a9f1ffe","ssdeep":"96:n9GcjFaSw3+PFUI6VnUhYaUcsKW/o4lk61zUY3gZP8AWqgiiOT:nRw3+dAc6csTo4lk2wvPoqbT","tlshash":"b3b18dcd6c8bc491312a124c56b9335079ba1b1bfc768d6cc65e1ffb2e3055535dc0a2","first_seen":"2025-11-12T09:11:41.19114Z","last_seen":"2026-08-15T23:45:18.976742Z","times_seen":34,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/BetslipControls-CFIpu0aj.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/BetslipControls-CFIpu0aj.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1610\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6411\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iz2R6hdt7CnLtlSBN1xDB0GQjDWkxTSs6dtdDsbIrEFQM1soFHo8uZZtxOGCuyLPJ2%2BcV6lj5KDrIQFWaWJHPydk2ei2PZc164%2F1ps7TOJ1Vsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28516cdc2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4095,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4094)","md5":"ec1072f9a12fcac9b2e9d92617d69c4a","sha1":"2fdfc99c7fe14700a979115358d62a6879e77b59","sha256":"37f7abf56bc85834e112cf6f31961feede3881cbf371566eaf240eee01a947dd","sha512":"3fe5ab928d9f18f3bae79c67756fa93c9c850864a015ac1a0d86dfb00612e684dc9f6f021e5430f78b4f7a8660bf711f98fab8ed83ebdaeefe3d1334419006c2","ssdeep":"","tlshash":"8f816997e403dbbcca25998dc60ec2d424a5175cfa2614c2d07f18a40bdc869b55eb7f","first_seen":"2026-03-23T12:48:40.599574Z","last_seen":"2026-03-23T14:49:47.316845Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/dynamicallyStructuredPages.json?v=1774276500000","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /dynamicallyStructuredPages.json?v=1774276500000 HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276469345; twk_idm_key=Ax1tIpkueYdP8a6wWFjic\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: application/json\r\ncontent-length: 274\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ds%2BfQazUCIFyo5rRbD6cgMiZ%2B6%2FNozEHIw4AC4qvz4Egq0ajiNv2NUfCHmN5%2BYgZzwTZsDStrw3LEfaDWnN5hN4TqSoonpBY6EF6SJHv3s3Jeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e283d9d492f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":764,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"61ff5ed77b867ea7b436a21eb8e5ab4e","sha1":"91488963a9157554638375ada821c4bb44b12dd2","sha256":"8329002355bc98821e6757dc86bd87104c3f79ab3fa48db2435c5d3baf0ec870","sha512":"e93a660a89166b2b4f17735c7ed67f95b3b333006596634a735da5159f605181c8a74bffe6924a82feef888aea5bab127c2aaf77685cd27efbd0d71b9d888456","ssdeep":"","tlshash":"2001493d3c10ceb4f7a08862d58167809992e576c7880c5c2cdeeb19c3ad24e1441b7b","first_seen":"2025-05-24T17:16:20.011585Z","last_seen":"2026-08-16T22:24:37.363264Z","times_seen":3044,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/SportsGroup__platform-l0sNRNKZ.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/SportsGroup__platform-l0sNRNKZ.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/PopularMatches-DWx3UOYn.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471318; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2EZIoWKd9IqdrDacmq0e5tc5dZ%2FPbmlFMUVlJlci2laohw%2FTSmCLlLqhkLBRn5PaeybmDClO0%2B%2FonYcDo%2Bodvs%2B0IJ0md%2Bj%2FgJi8N%2FC2M9%2BBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2849ebe72f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/javascript","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-08-17T08:56:32.156091Z","times_seen":230524,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1060.com/storage/medias/galabet10/content_751_772584de349d18d1cda6a899ddea7912.webp","fqdn":"icons.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_772584de349d18d1cda6a899ddea7912.webp HTTP/1.1\r\nHost: icons.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: __cf_bm=gSPSH_YPGT6wuRZJOa._zBHpOZQ7b.HI.mvY_aUVADw-1774276470-1.0.1.1-c4WanWXkKDNCzoo_AAgdxaGsAN5.OaAtOm0aRqSCoX7MuZdJUQhoOB0U3raUNHhF5sS9gZB0OgxAbemZEEi5pKXWdSJr0VsehJFxChWVLMQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T09:43:02.208337Z","times_seen":17933663,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/146/293351.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/146/293351.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1510\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jun 2021 08:50:49 GMT\r\netag: \"e69b5bb1fa6bd71:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 20:42:04 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 64347\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=AU4H_tYXPqFy_aq1HpmAPSgoHWpfyJiTOlu2.6LEvbM-1774276471.9434037-1.0.1.1-dzcOe7J4te7fCMTpoVGfPDgf34AcXi95ngd6Bn6NZz1wFVyPZW77EiEKAuEwFUvi7v7hb8j2wvtHOKijA5QNlKU7Dp1CmwXoP38wZj1m1sRl5tuAPNaZL.A5jWjBkjFx; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BYiKT9pAcNbuqcex2skIaNic77Qv6BiInMsSG2R5cymaPzejJeCmXGkmTwz0zNi2LLl0t07xxeaif%2Bv16BZit7imlROVMUrSBTIZyCgN5cxwujguxY%2B8bUrEA3c%3D\"}]}\r\ncf-ray: 9e0e284dab0b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1510,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"6c205684e980e208adc5a7f897dc0651","sha1":"389ebb1ab5eadcecd9c48eb6aa3732626f48e833","sha256":"8c83475461353b8c1bb0d8ab7deca3d1967a24a8eb736008666caa8008d60e3b","sha512":"3d834e6a84c6a44e9bfc373791cea34a4aca90585d6eae8c4d7b4d6ee3953890776acf0cf5e0ae52e47c9d1a83fc0f42ca2c1e7cd92ecdb608c779d745a5e908","ssdeep":"","tlshash":"a531f4f4efeab8ae41092d1b07697ca3f205ceeb0c7275205e69c2940b4f2d46c88295","first_seen":"2025-09-11T06:38:43.620927Z","last_seen":"2026-04-02T04:09:06.002497Z","times_seen":26,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":93,"dns":3,"connect":7,"send":0,"wait":13,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: BjgPl3QA5IK1JuZYhXx185roQriMTjA2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=im5PM63HwjR60FP8n3Tx1hhmBCdjeN6X3lYE9iChIdHNQz73CwksylrFPe%2BeShqHErXB5XTtbPgPhQO5QWPhqxDWtXHP%2BRpoXinMEIXnSH6rHa8%2FELVSZftEbuR0Jw%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ab5e2ae728dfa6338273a7f7bcdc636c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: 2HkMa-Faa56glRv4A6jOxeLEqX8rYhl7t8ik-kf7jiReXQVnhVGKfQ==\r\nage: 6412\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\netag: W/\"a2363889186e23777b4b704661794f3d\"\r\ncontent-encoding: br\r\ncf-ray: 9e0e2851db58fb58-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1831195,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (36723)","md5":"e8b7fb0d95dbaa98cd2853df6f5a60bb","sha1":"941333f507be5bd72df00aef32af41f3c4960f18","sha256":"b41a47a8b34560417980567f5a31e8dd9f0a4d721747fd2a386201494e967ef0","sha512":"2398450ec1ae216efcf3e48ca65f2e883840d763e360d1261aa95c6299117dca87e90ea14f607062f950f2959e3c6ce4b98407dec204003351783438431b7fff","ssdeep":"12288:xF7gB5EvtEvEEvtEvud6Bg1qgn+wGycL18/aIpWzP+/kQH26difsGiP8xqIpCFaS:xGBzd6BgJn+wYzjfsGiP8AI3I5Z7yw","tlshash":"7a357388295ef3500957e0ebe03b2d08e12ec635f84ba4419f7197b35ab6357e3ade11","first_seen":"2025-10-21T05:37:22.174465Z","last_seen":"2026-04-07T10:05:04.590541Z","times_seen":23,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":51,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/logo.png?v=1767600520","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /logo.png?v=1767600520 HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470271; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 7738\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:38 GMT\r\nlast-modified: Sat, 21 Mar 2026 00:05:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4O%2Bi4JpLjNDazpCq3wvEUWc%2FLmPuZeDAKZi3B5xWZWLpPPBl1Kkv5geDIZaIodB%2B2s2RO%2FiPvtt5uir0kD4ky9%2BEIled945vVZKCDzDAe2Wolg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284429f42f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 120, 8-bit/color RGBA, non-interlaced","md5":"60c432b2e1f44042e6831b308a2fcd28","sha1":"a0092dc780b9c15f23421dedf670462258e4bfea","sha256":"45f7ccf0315aa2e44a658598ba76a0993ffdb4ea7dbfbb569ddba207929a7461","sha512":"f4a8c1c80e4cb91a70a4801ca5e7efcc5e4cc742f4939f805cb65969d34a896b1bf2f82c5f2bc2869b8e6be0439157f84b1365dfc3c76584ff2cd983e97d5eba","ssdeep":"192:yLexi5CqFsyyyjU7Bmu3n/0Hw+mvTZHOpoNI2kAZKqn:yyUVmoCVFvTBhIGZKqn","tlshash":"69f19fa70753e811ad00922f841e0285bfc412e5f36bafce13b3df19862515475a96e1","first_seen":"2026-03-21T17:26:39.532964Z","last_seen":"2026-06-03T04:20:31.943261Z","times_seen":48,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/withPanelButton-CJW4F-kD.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/withPanelButton-CJW4F-kD.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/NotificationsButton-CB7B8FLB.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470775; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 512\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWtHxvirvS8Eqwjj%2BgDWFC78q1TWzMXjsTSia7qT9217hgAwnJG9h93AM0R8CkdWUsZ4mR%2B0FZmzP1pRD9sBB%2FsWgzas%2BYtNBPNq1Ndo%2BOmQRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2846faa32f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1089,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1088)","md5":"d7fda45402c809846f53d8d334af72f7","sha1":"42e20b26d0d4117e8548b3160aed53eb52a29246","sha256":"19777d1ca6f766959fc0d413358f0dbc1ce971dcaddd42093b8069edb9c58aaf","sha512":"6af604fe6a4de7d9c95dbc7c854efc1a748ef2c0bb058f9d2c6ce8a062eb648bef0af04cdc6b66955afa70c4960c1bd0f753b0e9402fb7f4977a623e242f17b2","ssdeep":"","tlshash":"ae11f0f4f584a9b2e4c410c8577b2cb2319e32cadce1049021a6c8e91fe8449961e9aa","first_seen":"2026-03-23T12:48:40.462683Z","last_seen":"2026-03-23T14:49:47.319293Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/0/820.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/0/820.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 7064\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 07:47:04 GMT\r\netag: \"1d1c183f695ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:47:40 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=sGohKgfwPPi6E9E3Cp6kaZtJZVrIkixCFW7qHtq1S1w-1774276472.5354466-1.0.1.1-.BKSKHW677VRSOT3lgoJib87CR4CJdPswbjhDD33osIjNsSL3uCGP2W78OiJmLOiHbZjvQ26576jSlHbybNLfM9kR8xKhJLW8FyD9kBFU1a178atTyUyAX0mrRq6WaY6; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nHPkyfbJwy0a6O%2FHa9uEVRc3BVGPZMs1r1D8SQUia8GM4m467IyLCVYent6RAbqRKaj6shfzVIbKt1jPRZ4eSTZOyrRRKz%2FY4KJdf5HJVLFRXeN%2Fj6WDKaV8cZk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28514a410883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":7064,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"254512083ac298d7695d3dc0346ce872","sha1":"61f4f13e5a6345d0fd47c5fb0c5de6f686f6f22e","sha256":"759a88438f967dc21d48e9d96a82913d56145c303a3170534e1cd16ebfb9c30f","sha512":"051e0e01761cab9ed940dcc68ecac38a1572cf216121afb11b072ba1c3c8cf2b85fb92db50f71a5c52e2a072efb26e275c19abf93e75016e4ce9e0208c2b8885","ssdeep":"192:hjsILOLavtBq4fbRniVwYlaJTLxK5FPRDJ9ax7os:RsYuav3Jfb9iVwYlPaxD","tlshash":"8ae1af1ce9424e28c43b44107604a38ff4f985f9e15a4dc68f7a443b99f6db630c3e82","first_seen":"2025-03-17T20:28:45.977736Z","last_seen":"2026-06-18T17:31:45.558355Z","times_seen":13,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/87/175957.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/87/175957.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Jun 2022 10:55:59 GMT\r\netag: \"62b98cbf-9a3\"\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=RFn9ggjDf5xTGB38fdk8BbSqj77RkMhuT2B4CQEQ9y8-1774276472.951257-1.0.1.1-6bSGcjVdF2KIBHTI_D.dgFaDIETArO.0VfIlnw22YBZi9trmO1oPDQaScKZ3KTzShwjvt44nx9GW7b333w7ltPgSGNAOcA5Zx5reGskeSdu9Te6o6iYBFuqWSawFA_e5; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VsTT%2Fdi5SxW9NF%2BcighrAX%2FksB272G%2BE2RK7VfZt5dLEZsBhmkFgbIASaEeQHsLayUqEPAB8nU%2Fi3YpjZaUjPZiyXqxcfNSLHA5HYQcG0PuMQ1yocbAUYrlQMo8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2853f95b0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"87af8083716421c45adf7b89c550fd95","sha1":"2eede979dce324b9cd8c9e45a4f1d89e27c74716","sha256":"a748f909eba7de62cc2b5325d56fd19af99dde087b3e64d9b759771f9667a356","sha512":"d28a590f64e63a3c78c08af9e4a0ea4655978ac7d5f327c10664f2bbec15013c80b735f97abe45164945e1d95a9a611dc3cd71ff084450c4c554ec3f72e81d07","ssdeep":"","tlshash":"47512c2db451c5b1b0ad894534db503397230cc5eddca7a5ec4e642a0d2ccd9609dbcb","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-08-10T09:12:16.484033Z","times_seen":221,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/88/177597.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/88/177597.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 12396\r\nserver: cloudflare\r\nlast-modified: Tue, 07 Nov 2017 15:19:24 GMT\r\netag: \"108f28cbdb57d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 14:33:48 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=3peH4fkXWAfpTkycD4bJE7LUMwPUiwHyxC_X3rw.SaM-1774276472.963876-1.0.1.1-VeUixuGRu.Nl5JOlf8wDfeiZt3.J3y_OjkTmgkrsZVUnrhNvwKyPw1fwfRe80h6VvbRKZiPWy4uHamIxc.vedxnnrJcQrSCv.e5DIU86Swwy4TwFEp0.vVG2PSNKe1QD; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aOZiOGVEjaNZUMlWDsbzSr73PR%2BweOcmvTiRUS0bYBjR%2BckCa90545io6Zz5q%2Bgbuf9P2Jbhutxf7GVrRNW%2F%2FP5mSuGXcED25x%2F6qTVEOruqSKjq0VaH2hVZjic%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2853f9cf0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":12396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"33b3a9e0b43cbc790cc64dd8c4f7eefd","sha1":"ce67f5928090ce833eb1bd777c03ebd640d74b05","sha256":"6b7ee33cba51fb67ccfc0bacdb5515acee5d8edd85210d126e9b8ba8f0712d19","sha512":"74b4b9bad1fc9a2909bf62b787084a29df572c89aba5a9002c76b0bf44424bc24b1e90118d49034777f17c9ddb1e3404241387da2ef664fdf616cc2dfce31f6f","ssdeep":"192:FSTwOZvj4K9p9egzRUcbFFiJ337DRi+XavmpGYCt5KMZuhK4BGxy+0tHjUeJat6:A1jJ/RDbWJH3R/a+pGY4ZMGxv0tpf","tlshash":"8242d0c3d1547eeea50cb0860d42ca1ec39b44873e4b0361799711b6e2113fa6abce77","first_seen":"2026-03-02T15:10:58.372888Z","last_seen":"2026-03-23T14:49:47.260062Z","times_seen":3,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: \"39f38fff97bceb6dd38d255228384ab9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 373834\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e28563eb175a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54016,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53968)","md5":"39f38fff97bceb6dd38d255228384ab9","sha1":"4f9d5ac34f834ec7f160fe555097691b45d47d39","sha256":"d9b57cfbaea5a38c3d279ba0a64a2fa0ccb499f94dfac8dc8845ac1c0f22f829","sha512":"cf1a36ed2530d962ee9a8013cfa3585dad4e85857e225c6a5670c92a574769d771b6a0f1ff2ae31c176ca078e7f747b704746996fe7dcbf826d906754e5545ed","ssdeep":"1536:fGUifm7kUdwddCriQiLc0Lg261F2BBCsEZf:J1V","tlshash":"cc3322b2f56710ccb363c22292d1f6bc202ae770d746ce96f427766c4ad12a63551fac","first_seen":"2026-01-16T00:46:03.995467Z","last_seen":"2026-08-17T09:23:28.228083Z","times_seen":34325,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e63i0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:37.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtag/js?id=G-2CT6DSEQTF\u0026cx=c\u0026gtm=4e63i0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 23 Mar 2026 14:34:37 GMT\r\nexpires: Mon, 23 Mar 2026 14:34:37 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154178\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":465712,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"47e1479e139cf8ffe365727ad4529edb","sha1":"9e80d301bd991e8b711d7662f4f55815e8024d1b","sha256":"ab356b8f9a1c2fca52ff4a44d57c1c861460f36251166466ebad94817e8bd7c3","sha512":"3bb840601b4cc2a0f23f368d86e51f946f166ea14ab2077b62c34b5bd538099c69570f419c0df296a4a8644538c8757f9e9e4d8a6558db4c79e08e5253a0a068","ssdeep":"6144:VjJ8B4fKAfICc93KwiKHnm8SBtS5K2wzO3Qpan8Gv/UywU2yIS+p:Q4RfICAbHm8eeBUX","tlshash":"2fa4f9ceb3da70265396f478903f018ba57b28a2b45cc899f189cce42d7465a4277f7c","first_seen":"2026-03-23T12:48:40.588634Z","last_seen":"2026-03-23T14:35:26.130824Z","times_seen":2,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets.json?v=1774276500000","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets.json?v=1774276500000 HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276469345; twk_idm_key=Ax1tIpkueYdP8a6wWFjic\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: application/json\r\nlast-modified: Sun, 11 Jan 2026 08:30:30 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fw4zWdgMCtRhQXEkvgi3pe0NfmQLNh2hbNhsnPtl5G6DHhqwNJBvTIOK9iEz0uboAfEw%2BI1WIEG67mxCQ4MZKcvkylc8XX6zBlaz3Em%2FEAol1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e0e283d8d402f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4ab76b84119b58e0274ebb7773c304e9","sha1":"fd09bea767c41f4ececc8fe17c49470ae25aa82a","sha256":"ed3f85642bcbcd5f01e24e07081e8c0cb4a2afb0e45475bfef46d8b5a1fedc83","sha512":"a19491809a33023feb5f4c6789e18bde6011500fb40806e367822393b3bae10fba4d339abefabd268b6297c5af3560f255448f36063aa4784f6631644d68b163","ssdeep":"","tlshash":"a3b002995a3985159746e888474d2906d000d1a3cbae1b5a50570568c3e07b6c694909","first_seen":"2026-02-24T14:23:51.200303Z","last_seen":"2026-03-23T14:49:47.185058Z","times_seen":17,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1060.com/api/public/v1/tur/partners/751/popups?type=per_page\u0026platform=1\u0026country=NO","fqdn":"go-cms.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/popups?type=per_page\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 447\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=qnKGC5q0_pg0TYR.wQ2DO26h4dS5xNlrFvo1nzi5zZQ-1774276470.5040784-1.0.1.1-4NNIPy0G5_L4wPtqKGqRHBEU3doJLnV5VjUuDROrIe.hlFdRDuuNf_kHxl1rDvKlTcjQeZNGxJqeyyOeW_mZyPIGdpDve65BTq8_cQasKyr30vzFaU9LPAzKpTrBUsWM; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZUGisHSz3%2Fk0EdNx7ZHrnZbjEn2qyPsLfGiozES9qLyFBBGRtPMn03FOsn0qS2cT8db3UCqHknKwvTb4ExcMJdYSXii%2BhUCKyYefjXciMEZMJoRQ3%2FQ%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e0e2844aaf85a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":566,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c7775aa3ad8dc9e29e8bf7a1c3cedee6","sha1":"084e82c6efdf744157cd20e46423d197b5305a11","sha256":"8605f4211bcc35c8607bb22c03ef6f62030aeb0c61c74188b39ff9769b728111","sha512":"03ee588eabf18ded0ab13556d81bf5dfdc3e7749ea5861e0628b9e1fb9a446a72314d8bc31cdef52c6b809c69c6287d0cd9c9e4b1f3fc4fea53bbfcd2aedb0bc","ssdeep":"","tlshash":"63f0eb2bba18c8319b4525a1a0826d8f58ba3d2aad0c99009e4fcb8c8270225e9d355b","first_seen":"2026-03-23T12:48:40.668565Z","last_seen":"2026-03-23T14:49:47.207263Z","times_seen":3,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/LiveChatInc-DL6PKp68.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/LiveChatInc-DL6PKp68.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470575; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1143\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1SLWVOmcQ%2FY%2B2Lvn5XIqp4dU2oVkHBUXGsIuthQcMtjHXU61Etb4KARFMaUqm9wkS%2BfS5f2uCn9eBhH%2B9yT302Ss%2FuiQD5haFsG3ZX1noTy6xA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28457e712f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2920,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2919)","md5":"730c0c3c4b92b40fa9126301c858ab86","sha1":"97c8594773d095ff9f92a0bc01b7d23af2c83110","sha256":"769454ef5610850b20cd2cf85581e46b953c9516696f7a9e06efcd63e59d30df","sha512":"d0bb8aa77fb2ea30faba966aabd94e395a55873f5fa9e1b52ea0da13844e8bb91024037c310a137278ac2231f8ee8d9eea19d5f2fb2d47d8f920589ccda24a3b","ssdeep":"","tlshash":"e65133ddc47cb4b1929a67e1323f7b5f711a571a94048c30656d4b0af52a4cbc163aca","first_seen":"2026-03-23T12:48:40.361938Z","last_seen":"2026-03-23T14:49:47.194745Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/MarketSlider-DXK8wbIK.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/MarketSlider-DXK8wbIK.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 414\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IQ60c%2FfekUxMnhFC8xkAzvsGScGIb8Yi6xcUpuiIdZwxAT0VenmmJxAPMOLOOb7KUNP%2FNDfjWW6QDfMXcfHXjF5YED9dwWtOGiLPmNxmctrA1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28472b582f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":714,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (713)","md5":"88cc8fe3eabc6795dfe917b313845944","sha1":"58b1c48f18b9e6f55548295301960c3500c0d5b3","sha256":"d84b304e37fdb53a32aaf4cd43cd59452a827efa8161820bc82deded5b0e8595","sha512":"a8e21dde7bd9552e11018c7a486893c13f629f33fdf71f4c0cca4a8ee1aa8af38c24a881d9cd427d63ab94df4eb30797ace068f05ed835bdc5863125f8ead0d0","ssdeep":"","tlshash":"2d019cc6b115cdbd52900789b7ba19001b342595ea5090c2f07b0fda1da084dc99aefb","first_seen":"2026-03-23T12:48:40.60795Z","last_seen":"2026-03-23T14:49:47.24483Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/useJackpot-CNwJD21E.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/useJackpot-CNwJD21E.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/JackpotPoolsWidgetContainer-GF_Y9WrY.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471612; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 450\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6413\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lte60YDrT9MZGhUBNPHsaYFA5KLTttBjXGkVeN6D0MJolRXS3JZiiuRz28tGVpPj9JW%2B%2BQfnFEcsu%2FaxK2UJWBAlzPjUxMmwc4nk0A8QD0OB%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284cad0f2f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":846,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (845)","md5":"cf614a3a2b135acd3fbb3cc58fe2fdb8","sha1":"71e510e5a1532628f02eaabdbe21336fd68bb839","sha256":"0e4cd18aef6d48edf1e25e902f1c17ab9d03b0798b0e6f90bf7ce8f362ced0ad","sha512":"c2801a589712a671581818d70d5b8e8708add036a53d31bf11b3efe5dc4a28e66303251ba11dae1be8c774169e6777ac8010dfc548bebe85acdf31679a462416","ssdeep":"","tlshash":"5b01efc6408ed5fcf28a48f141b28b6e233c3f3ab60294a0d19c2a5e9354c0eec25682","first_seen":"2026-03-23T12:48:40.290148Z","last_seen":"2026-03-23T14:49:47.20994Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/loader/fasttrack-crm.js","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /loader/fasttrack-crm.js HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Feb 2026 13:55:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: X9ovE_PVlm7QTMnZs7pgGdxk3XrTsm57\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eKBH0bcP69GPHj7SAoG5c3Bdz4JyYsqluPScMz%2FxkOGOXQMsb75oPJ%2FYZ06claICR6C74G5dEM7l8JaGnRR148CbJbRYw8Rg%2FLTUkOruaVgdMZS4nsKYqL%2Fgcg4nqg%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 08dc547306e2c7102196b53ce0859e80.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA60-P11\r\nx-amz-cf-id: PCb-9sRNJT74zT35kcMuKkglZxwv8SnnaMgOpIrfLpaxlO-FT6gqdA==\r\nage: 6551\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\netag: W/\"0e62b669f80928b5dac9ece193256095\"\r\ncontent-encoding: br\r\ncf-ray: 9e0e284d6ab13e6a-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":6791,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0e62b669f80928b5dac9ece193256095","sha1":"a04e0c32df6e15dd5621258cdab16ca08361d27a","sha256":"cd306f0e4ea334dc0a9ab35e3e6c3c73a34876b8d8be27330916196042a1437d","sha512":"930f28be027cbe059bedfe820c6920d8668380c8aef844a15c140de8e907d2be6c5eb38470f0809709bf8d2d0cffd411c61a92a1fb1592503d59e24ff8350cc0","ssdeep":"192:/XKuPlMK5EbbbCUuUD7Z4ac2tMOx5YemndU25i5ObHwxaf6pedviiA:vKEiw8nbxDt4atx5Ye4ymr//A","tlshash":"e5e10e5c29f394610a93351f033be125f3b6e533221eec41b9dc8968af54667caa7d88","first_seen":"2026-02-12T21:09:52.600201Z","last_seen":"2026-04-14T09:08:05.84184Z","times_seen":66,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":25,"dns":13,"connect":9,"send":0,"wait":29,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/BetslipControlsNumpad.P1RjW1Db.css","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/BetslipControlsNumpad.P1RjW1Db.css HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/tr/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=0; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81; twk_uuid_68a472fefcd547192dde9e22=%7B%22uuid%22%3A%221.2BjJm2Ru8bfdEmhmyI0e0lBzwrbjVlKyfuqyviT094Z0rH4XiOXJArZq36QokqXukk928ifllIjG6RUs8jGjNDnoHlrQGQxNxzhcwJRUFF3NXckwv6sIiRTkAhO%22%2C%22version%22%3A3%2C%22domain%22%3A%22galalbet1060.com%22%2C%22ts%22%3A1774276472466%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: text/css\r\ncontent-length: 731\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:40 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6411\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gh92dALLRychyBQFscqdBK4PqEkTWqSXc8Mjx0XuH8DhoabIxpOiGl0pgAvYqnsy8hK3Z5MWNUgcQzGhBGyYlS4FpCTD1lJLCJ7vegH30vDjzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28514c7b2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2945,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2944)","md5":"f1b06021c6f0e7bca8cfa1a372a6acf2","sha1":"c8ec376a610de93a1bc0da1db1e48d87e8597746","sha256":"66c8d53991bd2e654604955300c09184c5cfba652b64e32ef5a0ef144b31513b","sha512":"dea5e4674c6542bf855c9002e9a233c47d991f684499475fbe9dced9db249eb7ae5fefd52c4e94d3314c3e245301a3fded1242629efd9053af2b8a6b6dd025b5","ssdeep":"","tlshash":"82519ca3d804223ca732a78e82e1c3cd71259a8add11336f787192b187d31da356643f","first_seen":"2026-02-22T15:45:37.931001Z","last_seen":"2026-06-09T00:47:26.238307Z","times_seen":43,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=68a472fefcd547192dde9e22\u0026widgetId=1jj9jjq2k\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=68a472fefcd547192dde9e22\u0026widgetId=1jj9jjq2k\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-wlqw\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-44-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 45\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9e0e283d9a879e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3586,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dacd168aa2c9e120fb99355ea20f214f","sha1":"18875360ed1f33c2a5b1d79ad82f95268bb26c78","sha256":"5ca0f768f0d78b7178726230c45ecc22d7096561730120a240d661f6ef92a630","sha512":"5cb577993807e710a4c57019521375a7d783c694c2e91733581353a7c03cde1788148f00457adb22e00fddd0e32f92cdb576903108e38b93b7aa2a301219af5f","ssdeep":"","tlshash":"da7122394a56ddb5b3c8829372ce7a27e86dd122e3844a1de1585d3cc3fb6cd226131b","first_seen":"2026-03-23T12:48:40.456599Z","last_seen":"2026-03-23T14:49:47.358023Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/DataspotTracking-BwPyciEj.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/DataspotTracking-BwPyciEj.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470575; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2292\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8MRcO9S7ZNNYuZyGmLZNaWuu%2FIbeaO4hX1UdNzgy%2BgOvdBL4dN8JpU8VBVXuf8ILkf2cIQqCV8j3u1mJc7O%2BEu9vMlNMFnJB6JKiuhYQJDilg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284628b22f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7034,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7033)","md5":"df8874cd1808095ad8d3c8a950d72086","sha1":"7fd997c670d4e0b4fc9624a59f5304641c86f3f0","sha256":"680665a2e420eafb88c85181f4c48ba09bce81a037536d572d5e1804e6458b03","sha512":"9af6fdd751cf45864e45f744f12654f7b9598eedd6d2b7228cd6c0b7b82c45f927e31ae874640f06ef43c23e1bf4bd19e49ca5fe369552ba60ee49692dad2b9a","ssdeep":"192:bw4ItlJYl7Mpqk0bj0JMKb0xdsnBdOSFPb+fGCg:04IXJYl7PIZVFT++Cg","tlshash":"14e12245781d78bca073d6ac0d4752a118287441e6329de076a6cf5a9e38cc28bf37db","first_seen":"2026-03-23T12:48:40.36562Z","last_seen":"2026-03-23T14:49:47.201964Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/useShowMoreOrLess.C1xr5R92.css","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/useShowMoreOrLess.C1xr5R92.css HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/tr/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470775; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 170\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:38 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EkYeboab2geZ6k00X8zPjmNiXeaGaXoKaF4rFFTXiLQNmdsO4yADOmxZ%2Bq5PzQgaAMSJJjKKnV6iZ5aBjcEoqo3DkAm%2F53%2FPfwzyaf9FPoJWsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28470ad32f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":314,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (313)","md5":"9c4d8ce5adb99f5913dc9d6adcd58a93","sha1":"3e504ca2679267a12f27b6c7bd9fecd0c5e73808","sha256":"9cdbaad927101c80e4438520b609e19d74ed04b2aaf389180347718035cc26e7","sha512":"231ecff2c79840aeff2100e0ab93c4af14468c8d293fdbb5c9fa5fcf99d679a8ae881fa871250fb9a9c361a906525f16c43e0845125f81d10d7a7047d1bd2401","ssdeep":"","tlshash":"cae020811a4b1934bc2a691bbdf0875f441965d1dc77499a1d804637c5c71e12475f18","first_seen":"2026-01-10T12:08:16.364555Z","last_seen":"2026-08-16T22:24:37.458132Z","times_seen":419,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1060.com/api/public/v1/tur/partners/751/components/1974/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"go-cms.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/1974/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: application/json\r\ncontent-length: 2341\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: no-cache\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=az4gwKGkRO2Rw23uacQHDFXsBB8xD56JLfd8ZQ6g6qw-1774276471.046769-1.0.1.1-zRnma0PmYcVHBawcI9IQ82bn.5_vTjuDOXDUTcSNTAPg9yFg09YsRzCC5sMiOTmawWwql8ilFTPLjFRkGb1qYsoO4QITGfXkkzegbNeBySxz_Xxi0LgDSFRKCUwfHHIi; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FFKOaG%2FXMlLOZb40sUPlb845plrlwYsXcjmo9jiygsPByovYYVQG8xlhxxX53AQyyCRT4wWrK0iPNnG6jB6NyRlCvELUsPyvwuKMRwi3D9ohTPh4eto%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e0e28480d115a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10648,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9fc3ac409c41f43bf56dd58784171dc1","sha1":"7965628e004beed9513519d16b5e499f5aec14ac","sha256":"f5565144b4ab41da885e3866f2abfed6b7495effb9568cb5250e01c12624b332","sha512":"bf59b204c41284e526cfd933e7b1a9b932cd1d8a1d17110ea30c0ed3e1c4035744bb8b4b05e4805404879384c46785c3a96ee6b65b3e0c5f97b34acaa914fde2","ssdeep":"192:EW/em/9ju/C07+/YKaCB/1n/SMk/fo/SKZ/px/T1/Mz/w+/1Qh/Ume/ZtJ/Dz/5x:Jem9jeC07OYqh1/STfISGpxTNMDwO1ys","tlshash":"0422ef23b02dd9ba4b447b40b4c3394ac99d5847dc0e9a70dc458f8d92ea62ec6e33d7","first_seen":"2026-03-23T12:48:40.518987Z","last_seen":"2026-03-23T14:49:47.243736Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/88/177773.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/88/177773.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 20724\r\nserver: cloudflare\r\nlast-modified: Sun, 08 Sep 2024 12:22:54 GMT\r\netag: \"202ec4d4e91db1:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 14:33:48 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=rotUrhcHXJnecfWEtzd5tmYNFVpD9hQe57sfPlDcaPo-1774276472.9093-1.0.1.1-mn5ZLdL9qyAdvXnmmr2w.X_1tCULMlR8m.SXObuVLIRsK0dVyOYJ9kei.TaykoFi.JN9M5k3Luq01AR5YcO3gz0zEukG8zen3MknO9QhLhqpm3qjTBHTkr9c8L9iyzlz; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7dCFe%2FCdq8dL%2BOqAMbv4kfAiA3hDULqwr3ELGUj1jSNibEdaZyggaRC7c4SBCz7Udh8QGrs9YB357RlCKyZ5uiZg9ecn7ws5jCxhy00HH3yroEMgXHF9yjt79Rc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2853afce0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20724,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"0d8aba809b5eb1b46cb77d262a7a29fe","sha1":"c4e88653b5260245f5ece244cc9e447b2ae83a02","sha256":"a13e2c1b2bd46b974b9c004c37bab702f183770bfd43b6e385b2908eb1e52755","sha512":"4acc4200842673a8a653644eedc345e121948d0984b2fbd7f4e98c2809c3fd1b19ec72e7167b5a78aeee63607701a6ba636bb3e7e2f06142355e378287a1b4c2","ssdeep":"384:UKHJA9U+hGdIIGa/3hzk6ylU09xG8uyxDieDc283Mmz++2xPevR:NaGzGa/3hw683G8u283y3xmR","tlshash":"4b92d1eed732dea3ff0a4c82506e991ffcfca1b95c2a670715516d0b0a2e570a8f4149","first_seen":"2026-03-23T14:35:26.148623Z","last_seen":"2026-03-23T14:49:47.235379Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1060.com/api/public/v1/tur/partners/751/notifications/whats_new?platform=1\u0026country=NO","fqdn":"go-cms.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/notifications/whats_new?platform=1\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: application/json\r\ncontent-length: 982\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nset-cookie: __cf_bm=xfbDQhyD7KQthAdn9tc3uvBwv98Cmz5gKYFPAJa2Kf0-1774276473.1858494-1.0.1.1-xp7zVXVNS.yHQ28cC_tQ9tJ0au5qnafs_5H91JW5BZBwgXhMXYJvCaUTEGgfT9pG2n7Co0vLFVsrfCdKLkjuztgFgxcqngbCF.xTHzvZCCP4GuFp_5kjZ3sNWLJO8Me1; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0jCUa%2FWy9Jukj1Ou59PFWaMv6vFopPS77g%2BGS7DgG2o3zqRSUaQUmmH%2BdBN7p%2FVoq9dUGFEBl3NyEz4KVDObVw5A35bLUBqUgs5w2PKmOwvjs6E3gVI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e0e28556f92a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1780,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d3c54fbb58bdbc049cdb0511ebe72bfe","sha1":"952c530fa5e60d5e6f4092dca93e957ff475f0e4","sha256":"e937a0e69c3616d29c6b6d653f7b58c1dedced93f6c31b8c4c7edc0aa70af0e9","sha512":"dc0267bfc82cc2bb6c9c397203c45bf5c4515432a8fcd8f0c50bedaf985707d1c2ad0fa8bfc057e3e25bd40b82e41fc3d6b57ffa4ebfa26699345edfcb66571d","ssdeep":"","tlshash":"b8315335657d4f4c8f81178a9487f12ea40f035aec54fa34d658cb6690686b8d5331e9","first_seen":"2025-12-24T22:39:16.028828Z","last_seen":"2026-05-04T14:33:03.573483Z","times_seen":59,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/QvLuXwupqtKCyjBw2xIzFLIf/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9tLmdhbGFsYmV0MTA2MC5jb206NDQz\u0026hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=eqr15pe79bc","date":"2026-03-23T14:34:33.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/releases/QvLuXwupqtKCyjBw2xIzFLIf/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42574\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Mar 2026 11:50:02 GMT\r\nexpires: Tue, 23 Mar 2027 11:50:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 02 Mar 2026 05:02:40 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 9871\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83366,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"68e95b07945492b587e7ff4b91130f87","sha1":"4396ba5a28ce7f78d370a1e2f262a7986fe4ec28","sha256":"5a117e9006534c8effa92757637265d75a377a221ca5e4b9c85a98f761d176d6","sha512":"c2042867ed1e83d709a0c4b72eed61a4720a95cf16b0306bbb09aa55bccbb6c553b2530eea2658850995f5200c65e1eeae916719efa15fdb555455d9a300830a","ssdeep":"1536:c7Rpgh9C9ToL9gTNfWNfK4RxEDldthXwW5l1Dx7:c7ArC9ULiTYNC4RyLX1","tlshash":"cd838e7338913a1afc278b616196bdfdf21cc923e5515bfaa5497a20c3cb0978213747","first_seen":"2026-03-05T02:19:44.399164Z","last_seen":"2026-06-17T17:10:58.850708Z","times_seen":15944,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"4662c7c182dfe30065936bfa05f8c773\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 6411\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e283d9a889e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4662c7c182dfe30065936bfa05f8c773","sha1":"d1f155c335c31be5947ef8ebf82be1eee2782fc2","sha256":"2d2d85dfc80ec4f42d12bea574d59879d269b5c06557cf888367fbfa9036fe47","sha512":"abd2530371ef02602814b0bed360225c0530615c5db002d61511bca5e8cda0d8da2bd288631ee02da5fbf952b31bd4380284dcd56838277b52654f7d13dc6229","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9svKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59L3Zwfi","tlshash":"ed323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2025-06-18T04:11:24.033166Z","last_seen":"2026-06-15T21:26:04.41843Z","times_seen":49917,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameDetails.Crd-DD_x.css","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GameDetails.Crd-DD_x.css HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/tr/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470775; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 6138\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:38 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oGmbS7Ud9iMwHdqWKlsz6wJCHO%2FWrtHVskpUfyA%2FmkGt1f0ivJ%2FfaYU63qpNGzcrVzTHJ0seCP6JqKRWA9N3TjRyCxVFdOfsZSH7RFtBHVBXbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28470ace2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":45762,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (45761)","md5":"2709fc20cd5e9ea1155b3c88a9e2512f","sha1":"5ce99f03ff231252f609a60f38792712099d402e","sha256":"a0b8d7fb659d201236a3841bf58717132c5c5e2f7acbf0df992d1b22e93b358b","sha512":"2c90d7e693f1fc74925014e4acf7210fb7ae19ead8b222ec3ff592fdaa7fee53a34146618531ad65cdafb709c9c55d26873c5137e55ccbac1398fd40f66392cc","ssdeep":"384:e4167mWxMkf/UPcM0S4Huj6Yo7BCRoeg5WDwzgLpAFTlaS4cCKa9JgJsuioZ:S7NxFsPcMQuj6NCRfAFTiJgJsuj","tlshash":"1823752be69d4a5eb03b942723ac7a8e5344e18bee206d3c7ad2af7e74447041431f75","first_seen":"2026-03-23T12:48:40.434546Z","last_seen":"2026-03-23T14:49:47.308115Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameListItem-zeZgtcab.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GameListItem-zeZgtcab.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1509\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zaY3TClzD%2BmEdy%2FV8ELeATOyx5pDDyPwYhtI3TgDRTfUzgmI0oRRjNonkdqlcb3shX%2BVQu7IWCfKgvWeRz6fWGrJbSwi0ccmtdS0YK2Os4NrCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28471b1c2f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4485,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (4484)","md5":"dc97c09e995083be87af3872add9861c","sha1":"943e5e82263a837692a9878f865227fcdea6e3d8","sha256":"18d0193b1fdca2b031f0cff8e09dd0a040c8c0b2fe03462afce8bd705aa075fb","sha512":"c201fe72b9f04a451e4e0a4cb91166e365a3ca89e78a23b91f534cbeacb8a28605bcc347d9f2a5bb0e06e5a736da71090147384c6e2cd445b368b67ba27749c2","ssdeep":"96:u42XMSLe0MMmodDlA972VYtpq8NoYzumJrOE:7epaqg972hooYimj","tlshash":"df917549e024a738f8379efe71699719f1310e8e875b4bd2e15e43690391390632bf97","first_seen":"2026-03-23T12:48:40.609039Z","last_seen":"2026-03-23T14:49:47.240149Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/CasinoGame-5_-m-aKj.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/CasinoGame-5_-m-aKj.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1992\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NhXW339WmkFFyouh4%2Fdp82BpdxBGq2%2FCo0GZGI1gXcOufgmvvydjHCvb743RaOaZPxv11qTFzSyqfqFoKHX3xFVzKgp%2F6NchuthjEHNCla5CuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28473b872f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5827,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5552)","md5":"ceb1657abd1bf321ccb354977c56da7a","sha1":"e1ae62fc87a2ceb93cc2116e93043087caed0c9e","sha256":"9486e7fef3c0aed6a9729df6b2cb7e0b1768fa8e88dce3df10ad5fee55d7d5e8","sha512":"8029d7f9ec329b161616a1d2384da322bc45d27c8fef81bc8c0bfc92531a1b4f37b9fc8c7afc3401b803f6a8675d1025f398191a48ad285b34743e62a39a2c76","ssdeep":"96:jQ30A5ySp8LCdLUKZUBbiRx2VZZ9L8O7XT+x2mZ97vCbeKbAFSvu:Ux5yihdYdBrDweXKJuQFMu","tlshash":"77c1a705e020ef7db93a0cca986f102978191fd2de198465e47da839366c11db267bdf","first_seen":"2026-03-23T12:48:40.387957Z","last_seen":"2026-03-23T14:49:47.270853Z","times_seen":3,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/BetslipControls-CFIpu0aj.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/BetslipControls-CFIpu0aj.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/GameListItemBetBuilderIcon-qDulsDM7.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=0; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81; twk_uuid_68a472fefcd547192dde9e22=%7B%22uuid%22%3A%221.2BjJm2Ru8bfdEmhmyI0e0lBzwrbjVlKyfuqyviT094Z0rH4XiOXJArZq36QokqXukk928ifllIjG6RUs8jGjNDnoHlrQGQxNxzhcwJRUFF3NXckwv6sIiRTkAhO%22%2C%22version%22%3A3%2C%22domain%22%3A%22galalbet1060.com%22%2C%22ts%22%3A1774276472466%7D; _ga_MCEY36CK22=GS2.1.s1774276473$o1$g0$t1774276473$j60$l0$h0; _ga=GA1.1.82658653.1774276473\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1610\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HIhmFA1wZpwuAvQMZNyXHef8R4ELw8L2eWvthPkKn4r%2Bv8eLN7BVF91FCrEuNuYmM4uBu0wOEDpyH3399GPIk3OXFzEgvGOOmnnAdnF8yAzM3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28564b4a2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4095,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4094)","md5":"ec1072f9a12fcac9b2e9d92617d69c4a","sha1":"2fdfc99c7fe14700a979115358d62a6879e77b59","sha256":"37f7abf56bc85834e112cf6f31961feede3881cbf371566eaf240eee01a947dd","sha512":"3fe5ab928d9f18f3bae79c67756fa93c9c850864a015ac1a0d86dfb00612e684dc9f6f021e5430f78b4f7a8660bf711f98fab8ed83ebdaeefe3d1334419006c2","ssdeep":"","tlshash":"8f816997e403dbbcca25998dc60ec2d424a5175cfa2614c2d07f18a40bdc869b55eb7f","first_seen":"2026-03-23T12:48:40.599574Z","last_seen":"2026-03-23T14:49:47.316845Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1060.com/storage/medias/galabet10/content_751_dfd676ba86e06ae3e4db748a4143905a.webp","fqdn":"icons.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:41.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_dfd676ba86e06ae3e4db748a4143905a.webp HTTP/1.1\r\nHost: icons.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: __cf_bm=gSPSH_YPGT6wuRZJOa._zBHpOZQ7b.HI.mvY_aUVADw-1774276470-1.0.1.1-c4WanWXkKDNCzoo_AAgdxaGsAN5.OaAtOm0aRqSCoX7MuZdJUQhoOB0U3raUNHhF5sS9gZB0OgxAbemZEEi5pKXWdSJr0VsehJFxChWVLMQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 53626\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Sep 2025 10:15:03 GMT\r\npriority: u=4,i=?0\r\netag: \"68dbada7-d17a\"\r\nexpires: Mon, 30 Mar 2026 12:47:49 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 6412\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=m8Jvfu2RYBegF0oxRvt9a_Pc8fJfKO852tdpPZAJE90-1774276481.831784-1.0.1.1-zDYTvxc6YGJ66oevKa8l7n_lXk0SrhihnRgCNb0BIfneWAdJ23bF_a5NNPkFRhL1O65Tn6xQn.aKSg_.5CCRnXe3oansa6xQu8f6nnECMhTcZVVmHTDQfz815WwFkup9; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yi6ab1R00f1oQ7XLzfu%2FxFL9ZFRmoa6mcr6WuQIyq3naz2sUc5Vhe46bMTdksdqX7DgLmnofZEAhS0qE6WHb5PdoAmdGs5575cacXQpazQjcDmC5ZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e288b6a94b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":53626,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x220, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8c21c56afc855ffa392f24a7baf3f725","sha1":"5752baebbfdcb318e960d3d95e129f207240d659","sha256":"2bcb9d6f56b14d357fa9e0d03bba4dc539dc8bede1625bc2685d83f2512b77f4","sha512":"665a1e4f3c696b25d3b8ff7039a381812c5f19c69bbbf75818537a000d69d8c5e25840bcc9fbd8db5a466ac663cf27ae912013d0a4f49a9e55a4824fc6d62de9","ssdeep":"1536:fHAJpKlV2M/dr1MlazrWHtLLvCU/XOIMW9Ko:fysVL/rCGrmCi+77o","tlshash":"9c3312157dee2a80542e1d6c6fa89fe6062e6e25d19dd4728f51a27c2fccb0f7c5a002","first_seen":"2026-03-14T00:30:26.838032Z","last_seen":"2026-06-03T04:20:31.837391Z","times_seen":13,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/___vite-browser-external_commonjs-proxy-B2J7BfA7.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/___vite-browser-external_commonjs-proxy-B2J7BfA7.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PxZmtv7UoILUnFurQ%2BpVjTdI%2FedhVDd%2FMCd9W09KJSmFcrxSnem3CUHFfKJWbhvd7ztiiUj1sFl3xTupDbNW9XKgF%2FwIXrtzw4MQ8hSqWxIWtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e0e2841fb732f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":178,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"409e3678405c9d40f9e4eec72197b8c3","sha1":"dce5fce2d436a0a922372748a64c33b2bb21907c","sha256":"7a3557eb0b2f536f33d8b5ca15c5ce0e99e8e21acf0b4b041b56f1ea0f6b5d3e","sha512":"cc3d186015170909cbb11055cc45f2e8b34d2c9d22d593755bc50d01dfcf14d5552262c084bccc0d12fd27f972a4a9c88a09ec7ce6ea116f9f03ae4763f7a4d1","ssdeep":"","tlshash":"67c0c0041740dcb051470c82c2108001d20c4d2f73f8f4e0bf0c8d00020248e2278f07","first_seen":"2026-03-23T12:48:40.606714Z","last_seen":"2026-03-23T14:49:47.19413Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/SystemBetCalculatorContainer-8g_IRTCb.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/SystemBetCalculatorContainer-8g_IRTCb.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 471\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KXDVRarvLaDNcAwY22db1p273LTT%2Bm99vJ0iA4erU5TVIfFtmuNWiWp1mtY2mlSRGMQKIgnmk3%2BVpdg3J8mBd9rXtVls%2FpWXAE13kAOKn7qtiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28453d912f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":940,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (520)","md5":"793b2b593bdfe7faac33dbea7112d2d1","sha1":"54bd686e66f906771f84d328897ae0fc7d2774b8","sha256":"02a74cc12ffddc9342f181c1656777b44f817ae0dd24c949bbbf07c9c4145dbb","sha512":"37de5bd8a70c48e399a03ba2080ad9c3d1ee419cfee4cd5aa156b2d0accfc4479bb173b3cab98174be70e93b33b59cf27ee4a5cf009dd72b797c7d5a19d58eb1","ssdeep":"","tlshash":"8411dca223a4ce75c48d0fb6099560941eb5030a690cf63875b28c3cf41549687afffb","first_seen":"2026-03-23T12:48:40.316181Z","last_seen":"2026-03-23T14:49:47.182289Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GoogleTagManagerTracking-C-Mb4Lcd.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GoogleTagManagerTracking-C-Mb4Lcd.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470575; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3895\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z2nD2hYot4vySXJAEH%2BFwm%2Bn%2F5b%2BqD3Rb1sRDBMu3n7%2BwR6mAB81Uz0DA6rGyqEEFJg%2BYj40QWGSDGg5vTlvc2tnJ11%2BaPDsUZFpvoEWEaIaIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28456e522f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15159,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13873)","md5":"e5b1aae3b31cc6810dd6fb0c57df8e3e","sha1":"b5297b43338ea1961c624b06ea02b3bbee1db10d","sha256":"d9a4b7fa85bf72dac586ebf819ea1c005c2be5185b93143ac15d8c437ce301d8","sha512":"2cba15c9a407c751249731946c8c1684704e8791dd01f7859993c5a1da0f5ebd6c742b97568049673f77ca2bcbf371f3dd78bc77a754417c0698a047e25e2e08","ssdeep":"384:Y5Kaah6ftomMGxGLzP+/0dKRC5kEkMkMkokcgPFXGByxhZ2:SKaahSz4LzW/0dK+9FlzIcAxr2","tlshash":"7162a7e7faa918e0a57d5ee81f9381c239b5756af0814070787e3c0c237ce4af1d59a9","first_seen":"2026-03-23T12:48:40.335424Z","last_seen":"2026-03-23T14:49:47.180244Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/AiPromotedGamesWidget-B7AYafeb.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/AiPromotedGamesWidget-B7AYafeb.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 968\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VSveRvjzefdiUMR11XsoUqhh6zd0qrxIkCXEhAfNC%2Fn1D8CToKpNaSo1hkVklo%2FViqVLkltCYOvmtFFbzFPBM6YKu78l4daY7JE%2BFGIFEVvYoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28473b7c2f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1963,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1962)","md5":"97ea669dfe0714175eba1d7147dac1ad","sha1":"2b6b6778be932b0af81ed837f854dac62e583585","sha256":"5938cc23cd212253d0f9b08a8f7a910823c006083bdd3086a655f36944107d3f","sha512":"6aaf8be6d9726407e953bec96a5473380cae4296964f71e4cdf20a415bc891b1320e407145bf75165dd359b589f938e53f7327efae8ba29a97a6401365cd0cea","ssdeep":"","tlshash":"bb41312fb01dc97cb36c0aa49294b78994117bbdd719e0e876ff5a01732409d637af41","first_seen":"2026-03-23T12:48:40.405841Z","last_seen":"2026-03-23T14:49:47.32088Z","times_seen":3,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/17/35103.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/17/35103.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1312\r\nserver: cloudflare\r\nlast-modified: Tue, 07 Oct 2025 13:33:42 GMT\r\netag: \"b1ef4eff8e37dc1:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 20:36:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 64693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=bvqlQgkFKIC22pvnGOVwaxkvNjush6BXX96iD0ix_5Y-1774276471.9413822-1.0.1.1-T5BeZkbKgNONFcjtYwDAUZrB4WBbRL9iNdeIJAGRQEdR6l10Bwo.0b4qLnlsHiyiQy.VY8Cnkr85vMLa0G_6rwMO25ML_r1Ei.XKHyoGF0zxIqysyNGUxk9X.ERshP8i; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n9YXx9gXNsbiugNPnWPhAr6GE5%2BCamsIqLhP5CVHTilrwLxTlP2Fgo5Ke3DJM1dGgRma3%2FksISD2KKxCREmSRplZ6SbsYP6UXZ9xJ%2BzV87qFGAp4bpu%2B%2BSPcgAI%3D\"}]}\r\ncf-ray: 9e0e284daafa2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1312,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"777fb97d8db208a26813777b2fc26442","sha1":"47a660ec30f2cec00265403a285990ff141a061f","sha256":"92c9b61f2c4132e047bc1a145ab57f3a6709beca8afc53665d8ca82810c5e212","sha512":"e006062a28c86b335ddbd1b038e25a6b976218237d00f4ff726315d1e13b055bae6ccef0a5b9a60b1b959f23baef9e4bca6d021496bc873e54f6e6a821f40292","ssdeep":"","tlshash":"6521fbfaa5efcd697f881e129c530b52dc111e471840d50d9408c1ed973a20ad1dce1a","first_seen":"2025-10-15T04:04:13.921089Z","last_seen":"2026-04-02T04:09:06.009624Z","times_seen":14,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":98,"dns":0,"connect":1,"send":0,"wait":10,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/140/281845.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/140/281845.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Jun 2022 10:55:59 GMT\r\netag: \"62b98cbf-9a3\"\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=g3OrxGjFQNuAtINsyCSGFqR5uGn4SaZY0SWKANnKoDw-1774276472.9486806-1.0.1.1-21l_Yr5dC3RW8EwV6LtyPboUK0oEZxQGVGBCBTE.aDDL8Z_F9LNG_vZtp5apv.BPpAhkCJChQTwazxKh2IArLQ5CiN0sKZ2tbYop7zjYM_r32jCGvPPwj4FfNSigD65W; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VL%2F7FcCZrvRdsMpDoJpQ2fVBDDoStlHRz23N1SPbYRrWYvGHsTnT7fEYrvfbPb4%2Bs6ns0wjHcDQjfpbYr%2F%2BU2S52Yx8O04xRrbfFp60%2BP%2BU36grPjsa%2Fmy1GJEM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2853e9330883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"87af8083716421c45adf7b89c550fd95","sha1":"2eede979dce324b9cd8c9e45a4f1d89e27c74716","sha256":"a748f909eba7de62cc2b5325d56fd19af99dde087b3e64d9b759771f9667a356","sha512":"d28a590f64e63a3c78c08af9e4a0ea4655978ac7d5f327c10664f2bbec15013c80b735f97abe45164945e1d95a9a611dc3cd71ff084450c4c554ec3f72e81d07","ssdeep":"","tlshash":"47512c2db451c5b1b0ad894534db503397230cc5eddca7a5ec4e642a0d2ccd9609dbcb","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-08-10T09:12:16.484033Z","times_seen":221,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/380/760810.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/380/760810.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Jun 2022 10:55:59 GMT\r\netag: \"62b98cbf-9a3\"\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=MGl5Eu2_ThjjjEMmzb47V_8UGL3ymfrIl79l_fqrcFI-1774276472.964612-1.0.1.1-e9DBVFLgHSLqlGcelQHtXrqZqugK2EtbkqHK7H.zrDELciK9OpzSwUAAEA4tj9oQtxXVXk0KScVObDGzLHAf7nlOeSGoLH1u1TLvHLVdI_P3HDX5UXhOdIRQ6CAGl06i; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JOdruiI9PO%2FBusZQrk1g5ZkheC41eH7jod9gN5xsYOarWDEFP5x0Nauz2IWH6I5W8UkEwuOW8WqD0EYM57zBYcaNmWm2lCU4n6ey%2BNXlq%2BaOqnxnR3B9Xs1neLw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2853f9e30883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"87af8083716421c45adf7b89c550fd95","sha1":"2eede979dce324b9cd8c9e45a4f1d89e27c74716","sha256":"a748f909eba7de62cc2b5325d56fd19af99dde087b3e64d9b759771f9667a356","sha512":"d28a590f64e63a3c78c08af9e4a0ea4655978ac7d5f327c10664f2bbec15013c80b735f97abe45164945e1d95a9a611dc3cd71ff084450c4c554ec3f72e81d07","ssdeep":"","tlshash":"47512c2db451c5b1b0ad894534db503397230cc5eddca7a5ec4e642a0d2ccd9609dbcb","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-08-10T09:12:16.484033Z","times_seen":221,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/Firebase-BTwtX3BB.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/Firebase-BTwtX3BB.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 14611\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ngx%2FJDZEQVBbuC94n6tXiaQNkE9RsSz%2FUfpN3FGA%2BAqG98oVXJmnv3WpTaj%2BvUhBPjevoSWh0CbPjLTCCLwCWUgrw%2BqrBU1ERzZHpPMbCu%2BceA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28452d512f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":84095,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4779)","md5":"cf92d3d16e4d2bdbf3e65f816bb67692","sha1":"f87afc1108f6d9b9f16f022bbe0673aac305d724","sha256":"3264e5d305a442ebe38a7992924901527933aa2a372f8d317397055c34849a75","sha512":"9cf7a779eaf4da3780592548b78a62dbf16da0b40c22402fa6f68b5eb7b0d684e7651a49258a4aad9557577ae4c36455d6c90ebfcbc0f502e9da799b2da596f8","ssdeep":"1536:Y4B1ZtLG0w0MlRdcuwMU51uxIZOLphF4yslNmuICMmWJRvebilqVotWL8Avw+u7h:Ys1ZtLG0w0MlRdcuwMU51uxIZOLzF4yv","tlshash":"c983957d7a922a3317d189ab792f50cbb319c64d390f8394741ec0e91e3e45a45faeb0","first_seen":"2026-03-23T12:48:40.285347Z","last_seen":"2026-03-23T14:49:47.185524Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index.6hr6LgI6.css","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/index.6hr6LgI6.css HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/tr/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471760; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/css\r\ncontent-length: 394\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:39 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=leoZV9%2BhX3RXisUqZnevxKUhTYeKSQpJPhOdwAK%2FnVcBfdfBEoVvOn44k7vZlhbPIWzAOavhkAB5Zoa%2FtXhuBvn%2BcnPa0FnL2gSGc3o1Al6U0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284d6f7d2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1252,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1251)","md5":"d03ad7d634db584e4aed770123954f9b","sha1":"eacfeacdafdf8738f325cba4cd9352bad2829a4d","sha256":"7dc01c1d9e89862143b3c4cc81a2255e63cdb8412bf7421061819919fc2c6bf5","sha512":"e4641ddc5f100aec535f0f87f4b4cf617ff4fe450de4ed993b3681bec62023646689f9f12edc7b03c4dbf21e0b98081e4e8dd5b0b0a13970fd25946f953bde37","ssdeep":"","tlshash":"f0218ad7190b14feba73a6bf454346ebe5238c5bce63114ab6c21729c4827a2422245c","first_seen":"2025-10-29T09:08:38.623149Z","last_seen":"2026-08-16T22:24:37.439594Z","times_seen":1542,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/129/258641.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/129/258641.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Jun 2022 10:55:59 GMT\r\netag: \"62b98cbf-9a3\"\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=m6GjK5iKwLlWFWBN.PhWJ1z7rslEO2ygwChawl9syek-1774276473.0145762-1.0.1.1-.CiipDqt3C3yD6.i8w4VYin9pYPN0DGEM3LTwKH5ZxbrxSEUzWkzvEw3J__n1JxXylc82CjkCrY.eiz8exypg05URAo9VJ_jpoi5Dpd62C_7iP9XTvPnypRZ6F1b_ld0; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PRNSAFB1klKl843M%2FNHhZQe%2By%2BD9CgHO40SKjAXcSlQD8bOnPLynjhRRgO0OwmTHDaqcepYc9d5WNe%2FrE9aBYmXkshYbHnZyLLOq0OkhllC%2FNBf2rKKdP929ZsE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28545bf40883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"87af8083716421c45adf7b89c550fd95","sha1":"2eede979dce324b9cd8c9e45a4f1d89e27c74716","sha256":"a748f909eba7de62cc2b5325d56fd19af99dde087b3e64d9b759771f9667a356","sha512":"d28a590f64e63a3c78c08af9e4a0ea4655978ac7d5f327c10664f2bbec15013c80b735f97abe45164945e1d95a9a611dc3cd71ff084450c4c554ec3f72e81d07","ssdeep":"","tlshash":"47512c2db451c5b1b0ad894534db503397230cc5eddca7a5ec4e642a0d2ccd9609dbcb","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-08-10T09:12:16.484033Z","times_seen":221,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:400,700,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css?family=Lato:400,700,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crm-lib.fasttrack-solutions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 23 Mar 2026 14:34:33 GMT\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2338,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ae317c913d9f17e384174fcac1e95f49","sha1":"97048ceeff296795e17fc282e38d26d44fce8bad","sha256":"0250efe84de4fea78b47bed1e3367687b72cbad25fa556879acfd9adf33f6b24","sha512":"3be7c2d8b49c8ecfd8fbe46e0e57aec92fe696894da6243f6b9f0052461f28eaff9b6974068276cde565287efe54a8a16379b21a522dfaaad925fa38215bfcc5","ssdeep":"","tlshash":"ee41ce92096fb908db830cc212c97d32ef0f625064499935afff14d8bca7d699362b0d","first_seen":"2025-09-17T17:57:20.126253Z","last_seen":"2026-08-16T18:56:44.142981Z","times_seen":7622,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":135,"dns":1,"connect":9,"send":0,"wait":25,"receive":0,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/tawk.html","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /tawk.html HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 20 Mar 2026 22:55:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3c4fa07Vfgy1i1MvE0APGu5aEKDzdkNwwA6glj%2F6UFye%2BArkgHwdapmy%2ByQsuopPilw1cznXRDRIELRL4%2B0JdPVApn%2FyMws9BVYdeq2lHNMHAw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e0e283bcfb42f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":446,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"79f790ea166dba225ec2afef5a730227","sha1":"d6fd1c7b06ddc148cbb938df6f017fbd3710ddb2","sha256":"a92a00d044a2930391136090ed00b9aedafbbaa5927d4391dc0d2923927cc449","sha512":"c84a1a01cec13349aed66e05e80f5e4dabdd4dd4f2295879409dc60cdf0674c9cf2520320412779135b6588abd44db3f0392fe11e8e2a12fd32171632d86cfdc","ssdeep":"","tlshash":"d9f05c9d2c40fe21824261a351f2ef4c29993024d345d510dacf8c0e391eef84c34edc","first_seen":"2026-03-23T12:48:40.581197Z","last_seen":"2026-03-23T14:49:47.346769Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/PopularMatches-DWx3UOYn.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/PopularMatches-DWx3UOYn.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1850\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZtT640ZHZJFXk4qdj%2BTcz5qxg8h44HxoAEVh%2FoQM4Sx6TvPoSoTDRGHdD1DHD7nkUvFnj%2BrXyJ2ARdjdpjFVJtauNqLmhPm3aUHmXZO61x2qRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28472b602f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4143,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4142)","md5":"e7a433026ebab6b5e50bb900c4b3e062","sha1":"3a3dfeadada5b7b93fe8d81df37f025168fad263","sha256":"9b3fdfcf774fff4f9603c90e8232dd304d4ce79351aa091d566868e4e61de915","sha512":"17b6ec41e561910ff697d1eed0aa7c0795724528181432f53fec4f4397fb7a8fbee78e9ad352d703ea68dcb563004c543d8fa4dcd0418315dc8e8ed9cea17b64","ssdeep":"96:25i3UVgYbb1pXpElO7/LCHf8aM1kG7+pwbo6X6Mq49nqH3c:3UGY1Fm87zCFog0oeZqC","tlshash":"0981d75fe05cd2b891b6cceaa57c9a10453605f9a3725790f4ce03b907c9681922ef6f","first_seen":"2026-03-23T12:48:40.29731Z","last_seen":"2026-03-23T14:49:47.19535Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/useShowMoreOrLess-BVv1yUqK.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/useShowMoreOrLess-BVv1yUqK.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 413\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UkgoIR1S8qI3VOl4ZDKnPwE58OjUbWixDrkO1q7j3hNdqOtHeZj6kX2JDnp1lv1%2FfUTMzGjYgBLzNonkqlq0IPd9T7PY3px0%2BaW9i32aX%2BPepg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28473b712f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":726,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (725)","md5":"11f63a5170003ceaf6e02e3adeed9a55","sha1":"f79ac5e167c6bc074520633766ae855bbaff6c73","sha256":"bc5c48665af23b427ca0804cfbac6296caf2116b59da14afb36bb844f1df2fe8","sha512":"a767b61b7f6c03527567a393517e204138bf087fe2908d6197865c1a05bbc53e2937223f08c2b556ef4eb540de0552d32ab4cca07cc92b812cf3e2ec68bed8a1","ssdeep":"","tlshash":"900110cab808f3ba81f816f80179d40570590dbdeb18a8a0a2e64945913c548b75bdab","first_seen":"2026-03-23T12:48:40.410213Z","last_seen":"2026-03-23T14:49:47.222803Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/3/7893.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/3/7893.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1847\r\nserver: cloudflare\r\nlast-modified: Fri, 04 May 2018 09:49:11 GMT\r\netag: \"149554278de3d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 20:36:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 64693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=QUKqRroRu4h_Idp.iZiQT160jBnn2Jo6bs0G4M60V4M-1774276471.943021-1.0.1.1-Ys9GHpvVtd8266CAMZtv0GCXLQpkAXgv1aL6PNuX97HdmpxB.QGrByfvxyd1ZEuC0YWoJuVehIPF8ZfCd85A2uzZ.jW7aM09letTwV_4dYVWQHx9u0vF9yFunYcFWMdH; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E0B3GANDQeDbNcfLdykfSxBVRxv84ehbliJkCL5d6IfYGAnhbsVbH9LA1uHGwWpQVrOmmv2fjOmE08fVtwEd%2BQ15ZG%2F3wi65VWSDlgN4fLmtFpE4g4SjrkdfilU%3D\"}]}\r\ncf-ray: 9e0e284dab042efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1847,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"2044c9bdedd3477dbcfd746671ab89bf","sha1":"6e4606219fd5711053543ef8f0a7ef3d18dc36ef","sha256":"237383c1ccebb7fca070372ab85328493665bc0867bcbd1414d03b1438d371a3","sha512":"9ad2af471c99d7878fab296fc0023b83e25974092a1031cca242b95faff788487f3ac4d1bd08f14de0e47f739a7a8fd7b31e95a48219708d05c9db15d76fa581","ssdeep":"","tlshash":"8f312b93824d35c9ab014acedf922104c508f7df05c1dd09eade03d48b49bcc1ba6f12","first_seen":"2023-05-28T18:20:13Z","last_seen":"2026-08-07T21:40:05.095491Z","times_seen":422,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":95,"dns":3,"connect":7,"send":0,"wait":11,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/1/2295.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/1/2295.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 700\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:38:41 GMT\r\netag: \"e59abf74705ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 09:06:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 106093\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=H1jJVjyQCCcIqsmM.uvUzbQhduE1ZE0BCB5s1M0zeZs-1774276471.8796806-1.0.1.1-d5aMCyMAD4uYEgWKM2di0.TUaEArwAL_AxhplDUlBO_n1mpwpmdjLUjp0TkugfJpC5oygLCnntf77Ljc0Aydh22oPYa0U4x5HST2stb4eR7M97a5nQv8p4znnIPagsS4; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WXDiEA4J6TT44wryMw%2BgcUixLuJEbTWtVNU%2F00HFJUvb3D3EtGCTs56zBiRqdRhAKJjpnBy187Z%2F5N%2F8AASHOIM%2BdIucLRgMy5Kua2vCmLqpR3NIUzU1IbkB7bA%3D\"}]}\r\ncf-ray: 9e0e284d38652efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":700,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"bd1bea0c6ffda4f93df67e984f7a86f9","sha1":"16c06c316949eee3b78b5411a78988e523d606f1","sha256":"925eb3d1c31d22a76aa7e527b31891eea7f201ce24211c2970a2483e3718d32c","sha512":"d119148d41b3cdfd53020d12bce9fde0e288634be6d0b79de9db01d3eafa9084db94b69c0b5b17632fe75a230d49be4543583c1fba1d2a5ca6f857eec0bbb0d5","ssdeep":"","tlshash":"7e0194f3a7180caaf40b40df0bba8102983b72ba0878dba4c8e3c51822086f80080482","first_seen":"2023-07-01T06:38:18Z","last_seen":"2026-08-09T12:51:39.721153Z","times_seen":136,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/5/11516.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/5/11516.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 10239\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Oct 2016 13:36:20 GMT\r\netag: \"fdec9373c423d21:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 14:33:48 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=zvcQi1PWOWmvgSdXqU0E6os99B6VuvSiXesPA23V_as-1774276472.9968183-1.0.1.1-c8wq6USMGZa2GV.0SiZcK.Cqk9HpqMtGIRk4VfcjYraSMygeUULyxtD6G2c5a7zqff0w1mLghcZ65xvoKxRSsvoZIxRxXpD0szx6yd8h1vSG0k9EkbA8J_6xtSLKEB.H; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YotxJdnMru1WtsH%2BtHtAbtc%2B6gnyxthP9ydP6UayHWDo9eQ%2FSk%2B%2FH%2F5NWGAe2ouM0LZYqzrTVhAjT8MyuLxWzv9DxSpUXT2ZcwqgU3x0ntQuv3x1EV935R5eZLU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28543b5d0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":10239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"fcb87a265a99d0c602f40ddd8b966e43","sha1":"735090d1c2b2e13e08e97621231538dbbaa49e13","sha256":"b2331c2828efa2d92f2c1297d2905ffab180afd1d80edfa2e703e691aa6edccb","sha512":"7631130710ff7ca82360b108692717005ea6839086b199f731df6a8f8eeb92220bfeb2f51191d70538190ade1a221e09dd5e5f5a22dc4ac9616d272b2b513397","ssdeep":"192:qn1LR+iZukhuwOSBxS9GyRGHxz+M/YHX3MFHoEi9B2YWOlP0AetGD2eTm:qnPru4/OSP2Ip+M/YHX8oESB2YbVzgGw","tlshash":"8b22bfc3969e2839c52bd1d16e39241524b0b9804281403e4728daefced7fb65a79e79","first_seen":"2026-03-23T14:35:26.160973Z","last_seen":"2026-03-23T14:35:26.160973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/297/594129.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/297/594129.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Jun 2022 10:55:59 GMT\r\netag: \"62b98cbf-9a3\"\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=0LnxUkPxV9VsBOdIAFH7QQM9_Qcqj70_NfYu77WCE_A-1774276473.0210514-1.0.1.1-V3pCyd1ll9MV4GDMmS1.3aQ4V7uz8b_3qaNU5YpxblOYT9vXMDvGANQNnJEVOEfIY15zuqhTlzDL8Ph4UIsxb.hgF9HFz4XACDrDNwSQiNqLyAqCkdwwnW1i3bEsAkaq; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K2wlNUbaBiiPZLGwR%2F%2FZhqGz7iQKCAN6EKjZfuzO56YguWpLCjabLkdQHiv%2BVsE3fXVLBRTAvQdXWcwLwtv2uFtJ7TyRdkJMl3smbswkYqHUhbmVQ%2BhXK4OZbSc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28546c3d0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"87af8083716421c45adf7b89c550fd95","sha1":"2eede979dce324b9cd8c9e45a4f1d89e27c74716","sha256":"a748f909eba7de62cc2b5325d56fd19af99dde087b3e64d9b759771f9667a356","sha512":"d28a590f64e63a3c78c08af9e4a0ea4655978ac7d5f327c10664f2bbec15013c80b735f97abe45164945e1d95a9a611dc3cd71ff084450c4c554ec3f72e81d07","ssdeep":"","tlshash":"47512c2db451c5b1b0ad894534db503397230cc5eddca7a5ec4e642a0d2ccd9609dbcb","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-08-10T09:12:16.484033Z","times_seen":221,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/lodash-DlcRXxN7.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:28.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/lodash-DlcRXxN7.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:28 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 57681\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MX1aUpvSdTDNG3W8advCh8wWlMQArqBKIbZMaMBbCGI%2FU2Q33vBoSat98EyGZ30LZfbtABKaD692wjeC2%2BDsaQd1lGtaVKLA7r3OLxRQAPMXOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e283b0d482f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":164840,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34989)","md5":"c9fae07b3ba1bc6c4c6e4e73bacf0120","sha1":"d11c4e7feafd021ef09e6ce1e1be3be550d11a4d","sha256":"b8f71a0e9157d281426e3e5c2e5f625f80a7f37a0b2f59dd90d3b38458d45515","sha512":"af9974744dd31087f2d3d9d988f4f674f1e6babe839fcecb6d2f56a7908758a94ef3337e32f288f6ca45a4dba31338b81a6c1654d523c193dca8edd675a64d78","ssdeep":"3072:fBzcuEitffnucMUVDAGAmVgfVSVQovSin:fBzI6OcMUhLzVQoain","tlshash":"b2f390c835d7f4a183a7287440bf084bf23ead65a84cd150e1aae0dd7db8919c277e6d","first_seen":"2026-03-23T12:48:40.505282Z","last_seen":"2026-03-23T14:49:47.247772Z","times_seen":3,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"d9deabdd1848c34f3ab46722f446c153\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 6411\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e283bedf76e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":240941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"d9deabdd1848c34f3ab46722f446c153","sha1":"ca3efc8a6fe26ae3556374b113dda96032edd201","sha256":"6a583970080e55cee4ced2fc7d5e5de94283f0e6eea428a50219b8e343ff0890","sha512":"d260841afedfa06bc864b92b64cf3bd1a323b2de447ce38cb1499cc6fccfab0da309a76814b6cfb20fae85fb5707fc72fec9996b64bfa31703445d6a933daa3c","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOrcErQYIMPdLMz9o115:kyWFW1W+fM4fFkBLMz9215","tlshash":"7e34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","first_seen":"2026-02-19T03:13:10.643204Z","last_seen":"2026-06-15T21:26:04.425371Z","times_seen":11131,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index.es-BOQ4Bx4Q.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/index.es-BOQ4Bx4Q.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 82064\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DsdtX3cbgEc6CTL7ATmOLGjCfdvKOq0uKkfqqTfh4Z0d3DZ%2Fvq9%2F4Q2qghKPZNjcAinwF6gQhLBfPxhicAjC28B0PbH7NCHWWhRXOcT0tcc2kQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2842ee502f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":295236,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49514)","md5":"cef3ca896e60f2745af080791e263ffc","sha1":"7da2625efcc1ecb9d44f256d13e9307101ea41af","sha256":"8197508dce56a9911e9ff0721426430a6835dd62468d5622f37ae597568d03cd","sha512":"48c3f764e5db85303d4b2bf0105a9eb94c60b19867e3541f96788833a17ae1f1ce95f82dfe35e3faafb6af89de5c474b2ee6588041ba8a9f02565f8b13107ef5","ssdeep":"3072:nzCw7+KZdQZv/7VXKAMJtSu7vYK9u6INz8P1jXJphlzfl8FnN1Nd6U8h:nz77jdU/7sJJMcvYisoljSFN1Nd6U8h","tlshash":"4554fa8472a7f47543d665a8943b1542f23a5c64700c902cf6acfceebdac4499a3bf78","first_seen":"2026-03-23T12:48:40.552221Z","last_seen":"2026-03-23T14:49:47.248342Z","times_seen":3,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/pageBuilder/pageBuilderHeaderInfo.json?v=01/08/2026-09:00","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /pageBuilder/pageBuilderHeaderInfo.json?v=01/08/2026-09:00 HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/tr/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470271; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hNpOasqG739Z2o%2BeBoIprKU5r64DPNXWxZzs2de5cXvtMwmj18OC3jfk2bccUGi%2BMbXhShf6QxxGchTmU25m5icUs3XGUHroF8J21zPAmoy9kg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28442a102f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-17T09:41:58.300309Z","times_seen":762057,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/12/24362.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/12/24362.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1729\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Apr 2018 07:31:21 GMT\r\netag: \"8560861667d1d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 20:42:04 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 64347\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=DExUvSkZ2D6ujwX5oDdggC3.k30COExjrNyIMHtvZvE-1774276471.875915-1.0.1.1-sqEcWlI7K5AwmlWEvGIeBqRCQmfLjrbi279s_Exl8.DzH9VojIVTB5bcZJ.JNIktM0c9nxMcz4PgiT.sH5df8iCienL4ZDZ.DaiKfJ2wVtCZ7IqVeFpLSQjqhbwFc6rP; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7vYsbXscDlfWWrXTPtxp1jixk25EmQG4vGRmRuf7wXNVsycIpYtOIEkWZ%2BhkXQYaM3eNNeYgFSRbW79e3JtQBuET5KadTD%2BMnAb7udHGvAuiDAxI3z3AWKXksgM%3D\"}]}\r\ncf-ray: 9e0e284d382c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1729,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"1048fc2f2ff9a9764218902ff540450f","sha1":"53266e033b38e2613d249b9a0f5fcb72ac36f1ff","sha256":"3d7fedf8c1df203a56060eee221a8f22395c66075b854d9c84df7720527111c0","sha512":"80377bb11b8bf92ad0ef86615e798c0ff2a72df3f3a62d684fbf436d8b9598448ddc24c1da8766ac88585b7316cc7f4e4a5e47d97cb866fcf7bffa1e6aa39944","ssdeep":"","tlshash":"7c314af14fa10cb8cf6580fb392b5850d51340ee1d46a8a2f1b1e8c8282ef163386d64","first_seen":"2025-10-14T15:07:14.443003Z","last_seen":"2026-04-01T06:14:14.192134Z","times_seen":34,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/804.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/804.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 775\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 09:03:39 GMT\r\netag: \"68a1def1735ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 14:33:46 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 45\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=K23CbjwTOm0ehPZ2xkGX7MXY6gXK_TQS..dFf7DM6Fg-1774276471.876108-1.0.1.1-u_i_mAAOf2vhZSCnnMA0FnTTZYMiM_bnCm9.YNqbHGi9yYN0kansU1D8IQ1Av2dPJ.7wYka5ZBNlQdCBo8v7yd.hBmrLr5UuzS9YSKvTwc_RXCMg.sjM36HG_zCMq4Yq; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UCRtdBYjC0FFhu%2FSdtG4PXTjl76%2FQzMPe3FQqKuAF0caRKoHipJOE2jDvRw5vqD78BuP4%2BfeQQZSKWNUG%2FvxkWtJ72Bdd81WLk9VEgCgE3FXoyGoO9WTQPYnhYE%3D\"}]}\r\ncf-ray: 9e0e284d38342efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"45a1454af1dcfef8f82cb8686c5722cf","sha1":"f632da584aa7586bbb9f200f902e2bf0491af86c","sha256":"83ddc52584655832ef9dbc7f3856799fd182f18992a9caf6c5e32e6eb28c83fe","sha512":"a382a8146aacd0975bce4bd9594dad34b2ce567c75d3f3bb6df842b90bcd952c487a5c46a159a81e43b0338056333fc60f54d66d7bad433718ec9f9306d95b2f","ssdeep":"","tlshash":"9e01bacb3f006a7ea0fc21ef708b1f046075306f0a911e85677584190d1df68802a649","first_seen":"2024-10-13T14:30:57.232837Z","last_seen":"2026-06-05T08:45:29.230126Z","times_seen":67,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/808.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/808.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 613\r\nserver: cloudflare\r\nlast-modified: Sat, 30 Jan 2016 07:34:17 GMT\r\netag: \"3da73da0305bd11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 09:06:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 106093\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=9jLXwOPZsKYMws2XnsL.21bQ8.Ku0B5KDmDTzOh_ukc-1774276471.8820848-1.0.1.1-NNxXvF1hbNTEuCzF3pqMQdARrEcuzudjxevxU2D1yi_kOYzNNcXmamhv0A2vygHVTSVUNB49Inic76jkSYmqF9XHdbjtMRPk7cUsFqXvP.tz0dAAw0bvb.bQeZA0mJi_; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uJ%2FjOfFaotYemBGYktBdo%2Fz0VVM97c6vVvuRP8TeWfS3ehCGGyqtBsDxtqz8H1yHA9F5%2BG65t7oy%2FNfgLFNScQjG7cjeNRJpHnNH7AVQVCcAh1rWYNi8O7wlJ8Y%3D\"}]}\r\ncf-ray: 9e0e284d38782efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":613,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"ea99648e4be2268fea2e91bc96fbc5cb","sha1":"92105acf6b158fe880a3ac4dd542a90f8b4777c7","sha256":"32db5c5739fbdca114194bf82ee5998fdabd34e2a8bc5a0254d07c52f9ceb4db","sha512":"4c44444402c81b86e1a7d50ddc0ba8436812c55807d6631a6d8ceac850d20f7b6cfc25f215842f323427681d9aa3250abb1bbd8f45008c5807c78d1fc50a0019","ssdeep":"","tlshash":"47f02d97ea9c88deee8d626b6d329ba5a80021fe0181282aa8a4a040250b9400a47603","first_seen":"2023-11-20T22:12:28Z","last_seen":"2026-06-08T11:36:24.50594Z","times_seen":97,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/0/803.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/0/803.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 5231\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:32:59 GMT\r\netag: \"8f6c8a86f5ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 14:33:47 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=1_A.yfIkRJ_Os6RSHc6y.hY1BIu.nt8WdFSUeECmGlg-1774276472.536407-1.0.1.1-KQN.QKCBGxVlyOXrrXNThwM9BlzDvWReKtW.UdEoBxnVSiGTd5HKCfwXOo_VI8xaxn9YFAqlGh2RU6nX5HtaP2cvm7XLRy3J19Ivopz1qU2zD5eZY399n4UbUGc6bKgW; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SZlnMV0e4xnRTkxm%2F2EkH1S%2FBDUUHAINO%2F9aiSNYb5KPS5X1hGIqp8qRPG1M55T1qct0edE55lLnFfiw6g4KefGaxI%2BBo3GR5VoeNTf1tK7Sbo8hYLYM4I0fB3o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28514a500883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":5231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"b71774e14630bdae56caeadd393f37a5","sha1":"ca70573bda0969eaf48a119fb2ae0dd077c1c5e6","sha256":"f3c9136bf2a8f730b749a27a9114ddb832983fd6a6db60e37e1d242efa9d9d39","sha512":"ff48fe8b740307412fac43cb47bf436a3435a49a8b81ac744175bddaa1e185eb330e31c31cb7bc91297a29993b509356682979b9b49391be5f93dd905538e56f","ssdeep":"96:bNzAKVazPdCXSLG6i5MxlG2myj1nCIL0u41KHcitVb6Ynm5raXMykkiN:RzqzP0iLnjlGjyjAIL0t3idRXMnki","tlshash":"47b19e8306a93d1eb57e0b8cb9cf8d30a685608de100b293245adbf6c148ff8a339408","first_seen":"2026-03-23T14:35:26.165413Z","last_seen":"2026-08-15T23:45:18.940948Z","times_seen":33,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/DepositCountTracking-BoRHw-Kk.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/DepositCountTracking-BoRHw-Kk.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470575; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 381\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IScdEsr73TJ2XFp2%2Fy6%2FprgfzLCrhDLOJhExbddYFFHt%2BUT5Ja8hQXgnSzhKAcfugqEUzxinwuOe4raGFO7kBlCtyvwffR53DQShCx%2BbDZ7f6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28456e5c2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":645,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (644)","md5":"3fd6ec90b730f729453f5188855d7893","sha1":"9c631d9eca7f7e4280a4ed5bf177919583e771df","sha256":"d325455799dcc39d884d2f5edee70e178f315a3a4992fd65dee13172cc3efdf3","sha512":"4562a3c2630fccf8689614d749462a48a64bc64a41f18e14d6bbbb2c188caa3d6425c1219c8349b357ed763275b224dc69c8827ef04e754214f3e20577a2215f","ssdeep":"","tlshash":"49f0029768b8d2f68a493ac473c298f373f0650db906c8c385bd4d4b0288003e4d8d1b","first_seen":"2026-03-23T12:48:40.363807Z","last_seen":"2026-03-23T14:49:47.186086Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/useSelectedSportsbookGameId-CKK_yRTT.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/useSelectedSportsbookGameId-CKK_yRTT.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/PopularMatches-DWx3UOYn.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471318; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 251\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCSC7Xs3GM%2Fp42m%2Fa93Yw6gaS7xhSz2X05kRwufuGNwu%2FxjUSnOW6I1C%2BbdYBfQ44hnyHnkNXbHToS38Tdm3wMxMTEwxQ6JlTaUIbyk5GToYjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2849ebb52f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":379,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (378)","md5":"b9e1bd389a4076c7532d96ecc3a337dc","sha1":"9bf218ae6f2478b236998838155c5ad292131871","sha256":"1b5ec45de6a85879e78a9cf881b896464a7e55d770416f9c5f7f3771fda9de0f","sha512":"ad7cf978c028b7c9e548b08044a9d53f91505d79793b889e1eb1067eb9b20a2785ae576f1d450ababe41a21bc6ea4a1a02f60f4905ef518064fa38965d58cb2a","ssdeep":"","tlshash":"8de0618d44e556f022ac8cdd1112e012031c28157537cd68d0078f3252af54143da671","first_seen":"2026-03-23T12:48:40.291859Z","last_seen":"2026-03-23T14:49:47.261806Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/JackpotTimer-DcWVJiLf.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/JackpotTimer-DcWVJiLf.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/JackpotPoolsWidgetContainer-GF_Y9WrY.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471612; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1231\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6413\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LKpKEReJYTQSRyQc9phWit2cTqiU5CdDi%2B5pqsJGGDDvllvtMI1QA00qqG%2BgZy5Bj0y7x3Wn2Zq2FiBNL8jlprs%2BrG4LeC8ySWjfdQmb%2FcA3sw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284cad112f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3991,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3990)","md5":"c34cf87b44c20d7e6fc42ddcd4de729a","sha1":"a60aa6dce2a01309ef6351dec7366c8e780004da","sha256":"c3c1ab89cd1b9fd9fd922a9c87880d89e4d2a7cf3810579f5871a6b22dd20a06","sha512":"a17f6ce1c530a33ad5eb6968fa68b188a6ac0a58d80a3643b3702af0686541ec77d8bea0b4be55172e36444e6eef72c7f74e44386a7a6ffe7fa47314e70ee7b8","ssdeep":"","tlshash":"2281ab08d896fba9eca64883587f4038364f0a69d7a844f8c0fde9354d6c98f760778d","first_seen":"2026-03-23T12:48:40.39772Z","last_seen":"2026-03-23T14:49:47.215619Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/792.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/792.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1011\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 09:03:07 GMT\r\netag: \"2c82bdde735ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 20:36:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 64693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=2Psu2C0HkBN5t2vyPBA6xlL42iAZh1TnYP2aahcgWgQ-1774276471.8839862-1.0.1.1-pHcx.ncVwk1oB03jeCPg.kK4SEeTy9DWopUFHCZggXq3khqo2uB6JQMyQiuLdQeKn8mLk7tr6ERVaNCzPn8314eXzQBb9_gyTUxv4xt1l61sNxrT.Sx65Nkp9WzhGiwj; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kjV1PAOpArGY0syIw5cZqIohql%2FkczPbt%2B0I4cgP%2Fq04XEqTlAMJCTbM0N6PFre06Nuyeq5Atvg1MP0YmBgoIuVRNRed2i85F4qxz8i15%2FznQKFDjGLj%2BvNbork%3D\"}]}\r\ncf-ray: 9e0e284d38a12efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1011,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"22f90bc2fcd2077ed11b42901472c25a","sha1":"df467206a77e31923db394f7c430a1bf4020b17b","sha256":"920c9189da98d8b9b7084aca16c49eef94fa79973584b49d279da220c340595e","sha512":"3100b1692233f60372efc9f9b99c4e4a18d99d371fa319955945894a401cc59c34cf544855edd1f3be30892952c6b4db9e5c4f8eb76db0e460b328315bd968b8","ssdeep":"","tlshash":"1711a8638e761d7fc78bfa9e9e8b5d2491055b950956494cfc7690d44b0cc45c4156c0","first_seen":"2023-11-20T22:12:27Z","last_seen":"2026-06-06T14:16:57.406016Z","times_seen":73,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/783.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/783.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1039\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:51:03 GMT\r\netag: \"4bdb6a2f725ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 20:36:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 64693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=u1zHDHI6NRs6_VsyJgIEuUcdbVmgpJsOdRnxCD6ggho-1774276471.8855202-1.0.1.1-qlMTidSSR3K1YPOUB0QpUIG.1ijidvfPWEvQJpeOTwK9QS0BpMg9dgbCEq0HdzAZPCXqsqEH3Qz1Yh4kgZV3GL6VO0ODGywcRT.kXzsP0aSXHHAX2HHSCyVSwptnZSG7; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EYrs4%2BcGTIgH%2FK5P%2FdbkbBMNdr04vRw5zhkOH237mzxv0hnc%2BU%2FeYQ3tfG9LprKBBDwWLjy%2BkVKnu0nmTx0D7pgGFUhslQqCnFqCLOWbUwzYUfMdgqnaqbAJTEY%3D\"}]}\r\ncf-ray: 9e0e284d38a72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1039,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"7e22459af53e6b3619c36c7c0a32f90c","sha1":"b8a592bbd6188683be8566148e5d5787e4c0dc7a","sha256":"2f8a5134c05a62a63f632ab7412f21a6c5ecca18906ff49ef835996326d84ecc","sha512":"5c8c81cb2d955159ed22fdb4eda9d8dfa022b9c7d5afdf98b73689a337c533d126eb77f5436964b9ecd57a64de70246f2233254a6d9f5148d7b46c64e83e3375","ssdeep":"","tlshash":"9a11a847d5da816e8b9f20bb576f4f54f2df25b193020c49515cb13e016af8014a18a4","first_seen":"2025-09-06T00:58:43.292309Z","last_seen":"2026-07-06T08:09:18.025526Z","times_seen":157,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/FavoriteGamesContent-BzXk7Hhx.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/FavoriteGamesContent-BzXk7Hhx.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1186\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ds21XJ7BojUstS7ZQnsA86Dsd2OCuV1XWFS8w9E8vUuBtIfrw%2Fll2dzfu8Yz1Ek9j5Nc0aIp1Qao1egnLs4LuBCI2JcWZdQ7Om7OxxazC0QJ1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284d7fd52f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2827,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1710)","md5":"a582630872ed88d3cf73be82a19f038a","sha1":"0bb2e1f0b100fb13810a3a10423f52c8cda65e14","sha256":"25b782407db9df7c35563b63090d18f6f87298521f6ab1fcc6567fdf09db7cb3","sha512":"02b7946bd368ac44e97421d7e722ca08eb3eab1b343440db3cf713e890ff83e7632522c09efb7754a77e5dfe4b8dca0a0d11e72268e086600647ac5a4553bcfb","ssdeep":"","tlshash":"8851751100819fecbbadaed92e2ad0a448aa074d6146d17cad794f7e30189407137ff9","first_seen":"2026-03-23T12:48:40.423352Z","last_seen":"2026-03-23T14:49:47.210469Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/17/35103.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/17/35103.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 7110\r\nserver: cloudflare\r\nlast-modified: Tue, 07 Oct 2025 13:33:42 GMT\r\netag: \"b1ef4eff8e37dc1:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:47:40 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 6411\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=QY3wB7G0w5yEnjHfr_T45z6jMqKUMVD7Zzmmxf7KmF4-1774276472.5252364-1.0.1.1-S9plptwWMwrna1PgHNGcZbiPBu8ixfLgf9wxoQaxG6ry0tou9stIDWKSIShbEgE1fuzwdzmOxOu2_6ZgQiK_G1mRCD1GTth8Z7hXG7jXtMlyfAC4d1DqVEbd3zPDo50T; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FHu8PCFbtzSyvEZgF4Szx%2BDdbMQ1GdWpVZiBtmJr8kTi4gaSmaLQnw%2Bxp8rdXqUqRRMMKgAHJHRNw3suhUZe7gAz1EdrXHf7S3QRWVUYoI29p1kQ3Aomlepa6KE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e285149dd0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7110,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"185c04921ad90431e5409c65f28c91cd","sha1":"35652473b9b77d8fa048acb19f428eb341e0ce1c","sha256":"12aed6eb157a94f65c0ade73df6d6013eaefe127ba2a217b3f42720d9433410b","sha512":"216b01d21176930117eed648c2e355094efe5a0c6e889d65a8be7b72d5461b0043b7ad0c141bfa4d7afa9ea018c1bc4559db9608ea52f3a140a785048867e475","ssdeep":"192:igtkqszGEy8aXQGwlPo2qPDFVTJqcCCph0MlC88mMJp5e15:HkqoGEy8vGwlZUDgMH0MlL8mepg15","tlshash":"eae1af06dad2fa1c57ed4a2943ec27fad9d0821c2e9e8bfea0480e5a80216470f750f1","first_seen":"2025-10-15T16:07:48.13461Z","last_seen":"2026-03-23T14:49:47.277716Z","times_seen":5,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/BetslipButton-BtoraXlt.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/BetslipButton-BtoraXlt.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 285\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FUepscHd%2FI9CtoVxG8x5rScdb6JSeRvYDW3l6%2BB7nT6fkci04YgcsrI8LM3V9t6xF16rL%2BpNpjYbXLS0B%2FMIDgnNFOARMfnctLm8MyAPyz3%2BQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28453da72f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":418,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (417)","md5":"06855a1e3c0f37da0d0b04a96020594f","sha1":"74fd4361e76e2f94d8e661f08aca1b5225fa8422","sha256":"d181a076ea651d38c9809e24f427508a277339684199e1f899804104c5935c87","sha512":"e948e373af61fa504bb82cfe80e34ddf084c924dc30b882f5fabb53de23938af65c551ce5488745a38db0a0a20b381f787cb982482ad8117cfb11de9e29dc1ee","ssdeep":"","tlshash":"40e0f1c7c94cc1fa4b9219d22102c222382655bca348f58180be3cb23fb4989c82f93f","first_seen":"2026-03-23T12:48:40.382231Z","last_seen":"2026-03-23T14:49:47.311634Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/SportsGroup__platform-l0sNRNKZ.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/SportsGroup__platform-l0sNRNKZ.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bWP7jt9R%2F5I6FseHtY2Y2sZiJavmlMCns3AOsWa1sckFRdHeylDI%2FAqRVzvXc7SD0anGAgkWZdsJa2hhDua3Miwf%2Fj1WkXyg1h6BT1BcxItW1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28471b182f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/javascript","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-08-17T08:56:32.156091Z","times_seen":230524,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/SportsGroup-C7izcyxQ.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/SportsGroup-C7izcyxQ.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 344\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7WokR84UuBYYto5g5ZdLMkpb82FeTICDKhqKu9mBoGjhLw1%2FiQog24KMC%2BPZnXA2d7hNl9E6ptPNhY9Jus8kkIyZtOEWs%2FJYIL7oHGGpDiDFvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28471b172f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":639,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (638)","md5":"79fac26db46b0907efffc851ff44e3ae","sha1":"aadf0ca3b7d9fc982a52e43bb735030bde29d045","sha256":"290544e9385123db9565953347de6c991b1e966832c88900999057aef1f7bf9f","sha512":"cf849cc2dfb84e897ad3e17ec894ecf1f16f4e2504f91af38617e6440f66f881491edf66a268b8d782e54c0c7624e93d54ab3770017b3665b1b86e93a321665c","ssdeep":"","tlshash":"7bf04900e074ebbdd53b15c0529e0418305e0a78eaad09e3d0bd193aba780d57b0efdd","first_seen":"2026-03-23T12:48:40.321924Z","last_seen":"2026-03-23T14:49:47.223386Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/QvLuXwupqtKCyjBw2xIzFLIf/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/releases/QvLuXwupqtKCyjBw2xIzFLIf/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 366969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Mar 2026 13:32:09 GMT\r\nexpires: Tue, 23 Mar 2027 13:32:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 02 Mar 2026 05:02:40 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 3744\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":863710,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"acb7d4a922d9a5a1337aa1a24004e1e5","sha1":"9acc0b5a3519c24e1ce224563d475d5a744ec4f2","sha256":"95abb266a8ef0207ba8032e78ee565442c8a7998b9ce06dd72ae5efd77c54798","sha512":"d065a75987917ed45d3235ec749d25f797038d701c93970387a7e77f599fb936dacefdbad9af50e39436f9bd78b08fcfed405c5915ea1c6cdd8f699269dc64e7","ssdeep":"12288:oGRVW37Ok82oIqOHTTQueAQ4CpSen5fIcH6et7YIOl2:rgOksIqOzyAQ4CT5fFH3","tlshash":"4a053ad8f0c675b95332b4f52477100a637d891ac95c085eb2b885f13ab3d4960bbebb","first_seen":"2026-03-06T17:56:23.511704Z","last_seen":"2026-06-17T18:21:50.595333Z","times_seen":8661,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":81,"dns":43,"connect":7,"send":0,"wait":11,"receive":37,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/webworker.js?hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9tLmdhbGFsYmV0MTA2MC5jb206NDQz\u0026hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=eqr15pe79bc","date":"2026-03-23T14:34:34.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"30:09:A8:2B:50:A3:5C:0E:2F:11:01:80:FC:9D:20:3D:1E:0E:65:96","sha256":"A4:2D:7A:76:57:2B:43:3A:8F:A0:D3:F3:1E:A4:E0:04:33:BD:AD:1F:12:67:F2:9C:D8:4B:7D:42:6A:6A:FA:35"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9tLmdhbGFsYmV0MTA2MC5jb206NDQz\u0026hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=eqr15pe79bc\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Mon, 23 Mar 2026 14:34:34 GMT\r\ndate: Mon, 23 Mar 2026 14:34:34 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"cff93256d08f0bcd559a2e2a240f0942","sha1":"2486b1978cebd43cdd33fab9a0b1f7276c988595","sha256":"0c5e214383571ea279b3a46f8daa06cfb0517ae806d6fc1f3397cd1178afbd6b","sha512":"25f91debcb2b820c01741bce0bb3f4b47c3be94060ce67d0ce72bbd2aca6d7a5bbc47be8a9531d750f251b033972fa85ffba10e2ad845e9b877f03ee357f31c3","ssdeep":"","tlshash":"b2b012b70520c41c0c009143ed67b3bce0057124dba0c0f940b54fd402384634146e04","first_seen":"2026-03-06T18:13:56.732651Z","last_seen":"2026-06-06T20:21:26.27704Z","times_seen":6659,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/favicon.ico?version=1767848401706","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /favicon.ico?version=1767848401706 HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 7004\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:37 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6411\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MG%2FCk59Jr%2FCmcovKTl8Xo3qVh6c95U5XE4I8B8me0F2SGzXZPD%2BV4wfLNAYa5lp7ejXlNLkzJMTKqR4COdkMbC64iJNyVlNJEzHCHXXHMiobSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e283c599c2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7015,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"96a66de67adef28337580739eab71404","sha1":"2b93f9d9f5ccb809e454e812f9dfa7ce9ab02b0a","sha256":"1b029ff1969f7f867742ed30370ab8f76f58f3a00c102b51740cee61a5bae6ca","sha512":"efd763159644683e2aedb05be3a541cc4792938d3755e0b0a1e8850c6240e04c3ce03e465ac5160ebea03b7ba0e9a948bff584fb163ab1db1677453bcb13a7fc","ssdeep":"192:AA9risdBVS6QwidYsQ6ujzwAzxyKjuDqc:AA9pORYsKIAz0KjYqc","tlshash":"40e19fc31979540617e9f2df05c4386ab74ca88793a2a4f927b931343ff19cda613229","first_seen":"2025-12-24T22:39:15.963833Z","last_seen":"2026-07-16T16:07:12.998292Z","times_seen":119,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index-CljhmIZP.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/index-CljhmIZP.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/DataspotTracking-BwPyciEj.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470998; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2407\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Awz1TbckYhsoI%2FRDd3xB80wnzI2Tpj5UDEg%2BcefonQJEfSI77c3ji0mCK0QfN3BHCqPtzLKEaQUOyk51lSEFMxSPMxh9wS0%2FANSZL7WJwInTPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28482e5d2f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5948,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3085)","md5":"de7f053c8c8458c68fbd84da04865474","sha1":"d41468f4486d1846556cd63328ccf60ec9ace0bf","sha256":"bad04d408884069f2410b400ca6314cbde26893b76cd9003f1dfc96a3784a2d9","sha512":"2cb51f71d4da6263b6206c640115762643b9a9550bc2f07673bd06c814a871f56177d87531e69e0e475b7e445fb418ed63a8393171cad8adec6fd281b19b1038","ssdeep":"96:T1SCtCFVeh7FHpokS73s9lsv2InwLRiTvHUgAaQKFr0FdWpA6u6PEDdxrOq+IHWE:q+ljijHvH0FdIuSEDdxP+Vj8Eu","tlshash":"37c1a65631906530c6d204e6914f42aeee3e6638f00f5060b23f9c6e3ba1515c6a3ebd","first_seen":"2026-03-23T12:48:40.450871Z","last_seen":"2026-03-23T14:49:47.2031Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1060.com/storage/medias/galabet10/content_751_43fdd9103b41aedd144468f1aa275931.webp","fqdn":"icons.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_43fdd9103b41aedd144468f1aa275931.webp HTTP/1.1\r\nHost: icons.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: __cf_bm=gSPSH_YPGT6wuRZJOa._zBHpOZQ7b.HI.mvY_aUVADw-1774276470-1.0.1.1-c4WanWXkKDNCzoo_AAgdxaGsAN5.OaAtOm0aRqSCoX7MuZdJUQhoOB0U3raUNHhF5sS9gZB0OgxAbemZEEi5pKXWdSJr0VsehJFxChWVLMQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 104916\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Mar 2026 11:18:10 GMT\r\npriority: u=4,i=?0\r\netag: \"69c12172-199d4\"\r\nexpires: Mon, 30 Mar 2026 12:47:39 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 6412\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=j6o1Q1PcaZAIc_G_TRiXlvcJ0I8JcxeUujuLaOseCtg-1774276471.4274957-1.0.1.1-DL9dmlkHPjff.m0fGyzv5uOI81gntW9EMtSy0iX6MCIb9IKeIPuLt4ZFHsprYHzYomtfWqV9bwqxjIPuN6Twq3k29e7LS0EcV9S9VgY83HNHB2lBIX65qaWWafpROVSC; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GMcAg4NoamlLGb56NZcxVbD5AaOJqDzrgQj19g3Qhb%2FS1qRH8LZZRbxlNBpe%2FsMB5qLpM3680Ap1s6eBY1GJnAeYbVw8eNEDvaU9jJCLXHQvqW7s2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284a6fcbb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":104916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x738, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f57e27fc944fc09e8221c66753de068f","sha1":"44aeaec0349e3d026137f2d8b27fda432ee272d0","sha256":"92b5e3a3dcb5e4693e642d3be1c318028f268f1b6bccf95b306c1c53c738d5c5","sha512":"974dfabbb8f700c36847a8878e1c5967fb14de81d13be87ccbdf78864185bc5a99b198371e89c799740c8e8758a6f1d6125f2e3e69ebb73dfafe04a90b1b9eb0","ssdeep":"3072:eQrAaUwKhM7cCCSt45Q4EB2y0hsH9w27JQpdetagF:YafoqtuQCsH9SeVF","tlshash":"f8a31261fc7367fab342e8f8c031845ae296fc15d3a9755776a08b91a234dc8f4e3018","first_seen":"2026-03-23T12:48:40.616692Z","last_seen":"2026-03-23T14:49:47.252278Z","times_seen":3,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MCEY36CK22","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtag/js?id=G-MCEY36CK22 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\nexpires: Mon, 23 Mar 2026 14:34:32 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154399\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":465790,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"3cc4a396d1ecc1d4768a74919b6a6266","sha1":"124a6bb9b5a0a82e4969ec115668ace6efa337c7","sha256":"548acfe8ff34c38f3a808ffd27de015b48d236dd05edba163d6b2d1b397a7a78","sha512":"9569f5f07fcfbd50fc83884c71a4cca5e9856f43bfa2d504b4bf160c1ff9c886747a421b4e17b9b251b66d1a00c6ec5157aaa630cb2f785b7e43f2de7856a423","ssdeep":"6144:v4RJ8B4fKAfICc93KwiKHnm8SBtS5K2wzO3Qpan8Gv/UywU2yIS+p:vf4RfICAbHm8eeBUX","tlshash":"73a4f9ceb3da70265396f478903f018ba57b28a2b45cc899f189cce42d7465a4277f7c","first_seen":"2026-03-23T12:48:40.317485Z","last_seen":"2026-03-23T14:49:47.35703Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1314,"timings":{"blocked":588,"dns":6,"connect":25,"send":0,"wait":47,"receive":62,"ssl":582},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/510/1020499.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/510/1020499.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Jun 2022 10:55:59 GMT\r\netag: \"62b98cbf-9a3\"\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=7vZiYgwyXdoyruDKjaytzUGMmu7XNGSTSV8cSj0poMQ-1774276472.9622335-1.0.1.1-P3fAyVGwHGeowQDK1AqM5cTBBXsov6PCgTCT1s.gdr6X1kElEgsfQrYOPoHPPeTcuS_Bd4bOtB687dW3oXchBAydSJ38IAx0gNa2uLpiNRFS6l2x3pfOy9q.L1s65.av; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dyt6oqnA2f5EN0jEbWQcYC%2F7KAcRyan%2FA4cSTNUgrHz5lfIyX5sNU7QqlB3JXBu3wZFATyoSbkR6pYigR6p8o40mWXRyJcHjkDzFQGhZ%2FtHDvHpVv6qE2xxQZs4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2853f9b20883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"87af8083716421c45adf7b89c550fd95","sha1":"2eede979dce324b9cd8c9e45a4f1d89e27c74716","sha256":"a748f909eba7de62cc2b5325d56fd19af99dde087b3e64d9b759771f9667a356","sha512":"d28a590f64e63a3c78c08af9e4a0ea4655978ac7d5f327c10664f2bbec15013c80b735f97abe45164945e1d95a9a611dc3cd71ff084450c4c554ec3f72e81d07","ssdeep":"","tlshash":"47512c2db451c5b1b0ad894534db503397230cc5eddca7a5ec4e642a0d2ccd9609dbcb","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-08-10T09:12:16.484033Z","times_seen":221,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/281/563774.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/281/563774.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 10795\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Apr 2023 12:29:33 GMT\r\netag: \"b4196ef171d91:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 14:33:48 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=MdzlAU3_76.l6Ng9UawTsQwaN7RdBZ5KBAGm3mdjkBY-1774276472.9793856-1.0.1.1-rzzBU_bmHagWRJNJHVEoMgREXpXjYgFHSEhxwQgO_iRzHqVBJLtCMkO6.ikumWMkuFCvHMd7axEcq.02YfKzv7Z3sxskqVTyA4yCBGfjkji.6L6DFuO0hONlK8dN2xAU; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QH7pXNP0DA8pzK5AFxkbn3l8wTsEPwQ0s8SSbOsoEJanvKQ%2BEMkPE5iIJNFK4DmR6knFaB71dL6JDmdnPctQY5kBf2RJfLoCMK7WZhlCHTXQL5MZYWU7%2BCtxacE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28541a9d0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":10795,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"305e92afd0c28fbfe21bd4add2ec8722","sha1":"81394e4bc5b8e58759bbe221e6519e1a888cad2e","sha256":"0757520d4f6af714364e6211f19f9b0cf2abb3051e385ff49621daa64dc4b06e","sha512":"61ba2025c3787f7db2f24188a8e79a525d6e89e24c920a840cb016243208e939dd87326ae37449060affcc4a3943b628ceaca60a40d3dea974c218f1d3c12316","ssdeep":"192:J4A6d1hpfUocBsK1W9He1O8mLpEREdl35aH2L92p9JyK7QVBRdWF4AESTp6jLqx0:+ZzfcovK1W9HL8MT5aH2B2p98KCN3AxE","tlshash":"8922c02c8fc8790654884786875ffd6a432b5a1edf9cf06a123980ded7829c5dace110","first_seen":"2025-03-04T04:06:07.278488Z","last_seen":"2026-07-12T10:40:20.652794Z","times_seen":7,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 6412\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e283bedef6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-17T09:23:28.219812Z","times_seen":67167,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/FastTrackTracking-DJnY4OPd.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/FastTrackTracking-DJnY4OPd.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 609\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6bVC7CTOufzo%2FypvL7nmLU9lU5EeVwjEPsh800Slnr9dXqYvS%2B1Vme5om8V7d987VmzBS1btjb5qqxaonHnxJZjzh3H2bRrFtLJYCSRLO9rqgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28453dcd2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1321)","md5":"0915e69e82695aa707c7c93022895186","sha1":"48a210838f20bbde6361861f9e3ff75a32f6db4d","sha256":"ee63c8cdad4e59e8694a37703ef249d15d335f2b3ff85e6b57e5ebf9589216f8","sha512":"41c107835a27bb9edfb8df09fcb2829bcb03b6651a7ef77365cc721c482b91119bfb684111e7e33f1556913aaffb3d072f5706c6c2636b603309daaf5b00671a","ssdeep":"","tlshash":"f221534e40e443a47c804e8de3d7a261953d5876711ec4e1b07b0bae3f0ca6a839ac9b","first_seen":"2026-03-23T12:48:40.383753Z","last_seen":"2026-03-23T14:49:47.198422Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/Notifications-Dn5RLrQT.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/Notifications-Dn5RLrQT.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 569\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1AX2s0L1urZFnI%2FeD4KmuhRy8oInScZPfcL986choqLcbgkd0XqNuJY1RjPnCskWltspg%2BtSToooPuVLlsV8ZoIrOJYtANeoWTh%2FW2O7yVy6hQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28472b3f2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1112,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1111)","md5":"2c303a0fc4982d1fdc4e77cfe6639709","sha1":"130b81f23192f84e0f1703205599ae45334e8526","sha256":"307da9acc2f5b0389ed49579106722ca9f703fcacf8913ab3cc7b5cb25a86a6c","sha512":"6ae2b52ce3644fb6c7a7115468c49ac9afa193c60e76235e1fd4bd05850c4ec742aa287ae153994369fabbf812f84372b30d73a9b0a7747f7f7c3d1b7ae02e04","ssdeep":"","tlshash":"0d2130df64869afc292144f5431b2a32703708187529456602fb1d2032ad70ad61fecd","first_seen":"2026-03-23T12:48:40.325745Z","last_seen":"2026-03-23T14:49:47.214021Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/AiPromotedGamesWidget-B7AYafeb.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/AiPromotedGamesWidget-B7AYafeb.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470998; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 968\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e82N6bjcxwcbBnn%2BSGu2g5Xt67VUiZrNrOi1EBzqGGKJi9VbxMUjeNC8iRlOxEhVy0Gxd%2FzPX1ie227YIunly6KaRw0Xowpu20V75MN64liS7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28482e542f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1963,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1962)","md5":"97ea669dfe0714175eba1d7147dac1ad","sha1":"2b6b6778be932b0af81ed837f854dac62e583585","sha256":"5938cc23cd212253d0f9b08a8f7a910823c006083bdd3086a655f36944107d3f","sha512":"6aaf8be6d9726407e953bec96a5473380cae4296964f71e4cdf20a415bc891b1320e407145bf75165dd359b589f938e53f7327efae8ba29a97a6401365cd0cea","ssdeep":"","tlshash":"bb41312fb01dc97cb36c0aa49294b78994117bbdd719e0e876ff5a01732409d637af41","first_seen":"2026-03-23T12:48:40.405841Z","last_seen":"2026-03-23T14:49:47.32088Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2176\r\ncf-ray: 9e0e2849cc9de9c1-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6410\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfepCHWB1qkSi-cNd1o8wsvD9BfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=16+2 c=0+1 v=2025.8.5 l=2176 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b91b6e5024dfdf6e8a4d61f0f74dd13","sha1":"1614f764ed7b516c7768fae0966abab152ac7d1b","sha256":"00e34844a07301274fc65fdbb65891aa95436b94c4c860d9edfcb96331c5487f","sha512":"c3948fdb40f0f4154fce632acb88cf9cf57ce39d2858e4934d8820c4d5729da238c569448b5bcb6d1780e37f005cb9f5ed60093005cfa451a92270c4c0034566","ssdeep":"","tlshash":"48413ab2c3378c72ce2cb5e3e9b2d5168b449a5a91859afc22413d33a4b145cc4b89e4","first_seen":"2025-01-28T05:59:32.007883Z","last_seen":"2026-08-17T08:38:05.022124Z","times_seen":3393,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/266/533971.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/266/533971.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Jun 2022 10:55:59 GMT\r\netag: \"62b98cbf-9a3\"\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=QZlM5jVXF8nOimWQa8PvWXmEYGfOEUBcEkCgsTI_5ho-1774276472.960278-1.0.1.1-EqW95lkfsuR2EFYr0mKJKASrpb9.DywhMHY.iJbLQE_MQbkLQ4GyGIX_ahV4_gSXx_aUCjws.W3kcvN_KB0mp6J._l6VRPxOVXz4qOqnWPq5KGIqYmDgMYhuG.OCAoO6; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=74dm5B%2FJZVxDot8QWHumzC4EaTYNgpCyzhaMsKu6CaBGOqjLBtjTarVdxcDiUR%2F6U46ySUPpcu6YawOIy3cVZA%2BdBqO089m%2BG%2BbNjtVNo7NUMHCsrc1RqZXTfAQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2853f9aa0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"87af8083716421c45adf7b89c550fd95","sha1":"2eede979dce324b9cd8c9e45a4f1d89e27c74716","sha256":"a748f909eba7de62cc2b5325d56fd19af99dde087b3e64d9b759771f9667a356","sha512":"d28a590f64e63a3c78c08af9e4a0ea4655978ac7d5f327c10664f2bbec15013c80b735f97abe45164945e1d95a9a611dc3cd71ff084450c4c554ec3f72e81d07","ssdeep":"","tlshash":"47512c2db451c5b1b0ad894534db503397230cc5eddca7a5ec4e642a0d2ccd9609dbcb","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-08-10T09:12:16.484033Z","times_seen":221,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9tLmdhbGFsYmV0MTA2MC5jb206NDQz\u0026hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=eqr15pe79bc","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:20:13 GMT","end":"Mon, 18 May 2026 18:20:12 GMT"},"fingerprint":{"sha1":"30:09:A8:2B:50:A3:5C:0E:2F:11:01:80:FC:9D:20:3D:1E:0E:65:96","sha256":"A4:2D:7A:76:57:2B:43:3A:8F:A0:D3:F3:1E:A4:E0:04:33:BD:AD:1F:12:67:F2:9C:D8:4B:7D:42:6A:6A:FA:35"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9tLmdhbGFsYmV0MTA2MC5jb206NDQz\u0026hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=eqr15pe79bc HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-security-policy: script-src 'nonce-pHVYNhQVhMo7JBQ5jJIhAA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96036,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (47124)","md5":"68d473d41d2d4b03b74be679320b60d2","sha1":"1ea9f7e9464da45daf32635484c7a5070369661b","sha256":"5de2bf70d7293109e1e4b8410e444d9135472d780157daf52b05508075498fa6","sha512":"8dba4eb15d5d4695702b47a23b3a4d7a83617cbb1393768da22ea5d520dcb961af437788724209f6818328b2f80a3c493840d0a00465b3497d23f9125a7408cf","ssdeep":"1536:y+kT8MU/JHcHNuMuH825yYWguf4H6MiP6YcegIYjzT11yxliCUERiLDQPaCvNJSw:y+kT8JkfwtugG3gBx0GERqQnJFn4E","tlshash":"6693ae258a032089dfb78fd013d56e78e63e9142304240e96bfd13d7ae9bdd7627929c","first_seen":"2026-03-23T14:35:26.176177Z","last_seen":"2026-03-23T14:35:26.176177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:28.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/sweetalert2@11 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 21418\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 11.26.24\r\nx-jsd-version-type: version\r\netag: W/\"13877-yvQx6m3IVnvgENB/T31XmBY4Id4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230216-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 1569\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DjxHhVv3qJygjaVy%2FFglk%2F5phJQLPT9yMsSoGL0%2BAuYu9cfRLXxzn1rM9kmMbsmwn3tUPyLYYNVIYY22LV6YKu5pMoaBQC%2Br6AJakTjawQ%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e0e283978273483-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79991,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49001)","md5":"e8f033d3c7a50e4abe3d98ac65234d13","sha1":"caf431ea6dc8567be010d07f4f7d5798163821de","sha256":"7506c8f4d85e4707ab46f9858f0c6e65e3316b9d2f122dcf485b9dbf39d5a7ac","sha512":"ecad9d89ce602e5121c97135933a33122f0d9b32c15b43949d5fbe51fe576da069e9a416772117eb4666d8354b685046c0d7a3e086f669fffa488e2f05ff0ba3","ssdeep":"1536:iw46xylPIZSKcO355lcVU/SZ2DUdzI8bRj:PxYIvTlcVU/62mI8d","tlshash":"e173f8916a00f03776bb45ae65d1e7047ae99405fcb34894f42cc8804fe7d4f26b7aba","first_seen":"2026-03-20T09:57:21.567576Z","last_seen":"2026-08-06T03:45:53.052096Z","times_seen":2841,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":49,"dns":22,"connect":8,"send":0,"wait":13,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/tr.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/tr.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"b1c2a4d2b221a5c3df91a782a9958602\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 6411\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e283dca909e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12522,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text","md5":"d5c878b97a6e060ddcc4f14fac2c8f68","sha1":"8f1cfd2be7067d0f230c6a8e4e85f700611ac5d3","sha256":"205a43ac3282e1533a6f03102f07c4b6fdb957b777e85135585af927547dda82","sha512":"9f49e1e332fbfc76add070a561f936093d3c54d0c9e0de4bd92407fd31a6716053b5177d586f8300394c15f21d9d7b68c9f4a25abccb5190ec3255eb87be6ab1","ssdeep":"192:OyJZiyVI8zVt8yr174zUet94dgbIfCTLOSWhmiUSI8MRcM:Bil4r8yB0ZgcTLHcmiLMRL","tlshash":"49429519cd61dd5b0196a34bf4db1643b0a942871f20382dbb4c86bd1f8e9af60fa74d","first_seen":"2025-06-19T03:00:53.745119Z","last_seen":"2026-05-13T07:53:47.020299Z","times_seen":585,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/___vite-browser-external_commonjs-proxy-B2J7BfA7.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/___vite-browser-external_commonjs-proxy-B2J7BfA7.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/WagmiConf-hdcVY1tR.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470065; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QQp%2FUpPsxwS3WUBnkwJ1NRUu147hhKib6xK7BtHtGnKkYli6RtpLkPf4dXFuL0FJLpSeTo5yzszNdbWoHZWh2UvGeMV6mP%2BFexXEUB3E1iORpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e0e28425ca02f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":178,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"409e3678405c9d40f9e4eec72197b8c3","sha1":"dce5fce2d436a0a922372748a64c33b2bb21907c","sha256":"7a3557eb0b2f536f33d8b5ca15c5ce0e99e8e21acf0b4b041b56f1ea0f6b5d3e","sha512":"cc3d186015170909cbb11055cc45f2e8b34d2c9d22d593755bc50d01dfcf14d5552262c084bccc0d12fd27f972a4a9c88a09ec7ce6ea116f9f03ae4763f7a4d1","ssdeep":"","tlshash":"67c0c0041740dcb051470c82c2108001d20c4d2f73f8f4e0bf0c8d00020248e2278f07","first_seen":"2026-03-23T12:48:40.606714Z","last_seen":"2026-03-23T14:49:47.19413Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/jackpot-DGmLRtK4.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/jackpot-DGmLRtK4.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 244\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L6%2FZrMOTu0UcDZQlomZWq8A%2Fus%2BiVg%2FIsPIDjAgoNBXaEAvpqiS4BfcxWQc56CBriowWRzkS%2FTAG9EOV4ImQhvI7ibgqEqWVOCdfYr2MKLvs%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28471af32f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":382,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (381)","md5":"564ff0363c26b2c1174cd143918febcb","sha1":"b816337fd7dda0ec9984344f8cba0b8c5164f388","sha256":"082d8826ce562cea90beb4d7ff16faff0b692b121e16518b70b87005d7b94d89","sha512":"60a7ca097270eab028868ef316969a2975d4b142b6bcf6f8b87a5fb7f4f553ac7a11abde4496a2fca1e91dd9a8f0a09b2d75a5ce7ee7bd31e5ec858757ab86d0","ssdeep":"","tlshash":"efe068de99c04eff91b0071a2ab5088809241a86100f94f87f7632722406bc828f8a38","first_seen":"2025-11-14T23:47:17.853619Z","last_seen":"2026-03-29T05:41:25.923222Z","times_seen":9,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/12/24157.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/12/24157.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1202\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Apr 2018 07:39:28 GMT\r\netag: \"49f7a63868d1d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 20:36:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 64693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=2N3fpSKcXeIJSCegRpDRaTUOCDrKlOQhdEui9k0EyE0-1774276471.8728476-1.0.1.1-bBetfhmlQyv06IFGHTYC7SI2ZUXoY7OR7z92sL030BHJipFt0d.fbhi8pa__LUEnSB_xvHjL1lCUDeepxT52V6OhAPchybOkCXcSLpYiSETa5V5aVY.QqdKmPb30dqNP; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nExpWB9SfyvQ7Y%2FhAOgsD4IdZKgbSsLteTlNQVLP0dARTnKUXQdVkUQWisJ0S%2B9ekVh2wfNgqvfR1rPP05FDSwVkCT8TqyomnukAXSa89KWofxYzMeNZhNx3RxI%3D\"}]}\r\ncf-ray: 9e0e284d380f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"398613851cf5ae77077ab38c4f90264c","sha1":"122022f65b1f02da7822a3e9957ca93c3cb0842f","sha256":"078179e284233f84df55e90b1099ef77f0403bd20f81d579c12283faf1d04695","sha512":"d1dabec601527eeec83cc7db02b65646b0f0daef5ddb313b1625735628b72a7f7b1381224023e52f4650f62d778a19b2d76752c9ee8fdfe92bf67f0e076e1382","ssdeep":"","tlshash":"6c21e756739cf56f82d9776523322540de6f01e32200a83edd24c8713308ea400d8e20","first_seen":"2025-10-08T04:09:47.900998Z","last_seen":"2026-04-02T04:09:05.986771Z","times_seen":19,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":30,"dns":0,"connect":1,"send":0,"wait":27,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/810.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/810.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 795\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:36:28 GMT\r\netag: \"dbc16825705ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 09:06:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 106093\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=lmh3mcsYet.5vrlqwwWAEFhMvebV9Kgp89T6QDjnEKM-1774276471.8833075-1.0.1.1-Ar_aH5KOkJOr2SHCTlokq0m2tdHJMYtCfUipMwB55eGbJYZvAD_3kNJbW_yZS58KCAdKt6nO.Y1aqo3akEnijsW3_X9yv6C0DJRe_emAWRevM1I_hxXDwdmd2UpxRx_L; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9IbYlxQ%2B3Pq9GqMe33hm%2BypoD19Kh4RuBY3ftC93mL%2B7gPX3TojM7SjhB6KLyrvVl%2FZxU%2BAcVTvQ%2Fz0GQV%2BNmEMz5vJIIl1vhHAsr8L5xYCre6uUI5EqOXS4p38%3D\"}]}\r\ncf-ray: 9e0e284d387e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":795,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"7ed87810c0d633aade5cc39ada5e5ab6","sha1":"555d8e2dff8743ee35c7fb233a444694edd8da5f","sha256":"9b0cbffa01abe50a2167f1395aaba7d962a305d4ef47c31e5f28ab5b101ef7f7","sha512":"9073c44db2de73358bc033af818a3fc08f679e2bef2ef25d9bf617188fb5c64dde4356be93be9a7e49bc65dcbce7aa3fbbd0fb49d19059a858849b30147b19be","ssdeep":"","tlshash":"4c0175c19b8a487e1b6e15f2d6dfc400f61583fb81f51a459ed6c021434cbd4568b66b","first_seen":"2024-10-13T14:30:57.271764Z","last_seen":"2026-08-09T12:51:39.761033Z","times_seen":142,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/281/562506.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/281/562506.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 8173\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Apr 2020 14:00:39 GMT\r\netag: \"74973169f713d61:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:47:40 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=y.HUzpedCxI8frzExhsCou8e7_zMvLDrl25qUGO3B00-1774276472.9745088-1.0.1.1-IfV4j02JXPFlf4V8MD1EyVMI2RhkPsARH_TuqAzXsagqjh.4l8RdAjyWGZvIltVUgs0zohk7p1B.HyU2TgggWrYlYYf1uRP6MqDkQR6c6q2U2LHkT_mg6cp5jwywWYZL; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ass2Jbq5QWiw%2BYA11OYTTFxp7jSkxBWOQ43rkS4cEFO9omQzmdZltHrjwN2ah316FUbjRrweypt%2B%2ByUhfvOQFQBm7DY73LkqR5TRwhGpxXQz4f46g3cW16oDijc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28541a6d0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":8173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"79ba63ed26c820e4456e206195a9fe39","sha1":"1665744b48b15274a6f1d8cad61551627202f634","sha256":"f12eb000b552de03f04af8291b25745e31a4102471997ec913c46d8a064ca3ce","sha512":"d0a7b84aecf041d65a660029c3db6066d1f6594a811d7a278b2c700ed5da876073bd67ca47c3a16d61de50d9676b6d8c4eaa3745e4738d5991e3fc1ca0355fa6","ssdeep":"192:1Aax3zzfjQ8I5BICr3vOjavM7kaWCN3ggxL5yGisN75Vdwgzd0:1LQ8NC3WjavioG9yQwgzd0","tlshash":"32f1af6e0be7d47df6e6133aaedd40605a1ad89e32d84045f7f148a184e585e0907ac4","first_seen":"2023-11-11T08:47:49Z","last_seen":"2026-03-23T14:35:26.17888Z","times_seen":4,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GoogleAnalyticsTracking-CF5zzLSD.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GoogleAnalyticsTracking-CF5zzLSD.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470575; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4570\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OuMmCp1E3t3JeRP%2Fulo%2FzsamxYDGRvitzQKQFMK%2BmjvQj5xqYWoJ2TMiUl8KW9tWW%2BIoCnxwGtfzhwpZ1BW%2BQ5KfzhNI%2Fo88C3b2OIymgjI8cg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28456e4d2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13704,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10208)","md5":"5683e733aa3682e9a5655632822fa303","sha1":"766ade6586d7930de614c2d4e02c960751e181fd","sha256":"8bbb4c1a596f0ab41e2d7ae47e82704b8cac186cfa1f96061cce9e2e3faac14f","sha512":"5c816a9e6cf101a5cb167acab598d4ad85e4fd63f90bc45cd957be351e9b80ed4d1962cb0cc93deface1a3db13336adf9acacfb7a06d03a47416ef2167612379","ssdeep":"192:S4WYceR0SE+m/CTb3bHXCT76hoxGE0VK7D6L7kBNrnPWh52Lz2PM7mBE:WYcoE/CzCIEP3Byy2PdBE","tlshash":"1552b55c32adb0b682df6054587f720bf1755910a458f480a269edf46ef8caf026bf36","first_seen":"2026-03-23T12:48:40.639404Z","last_seen":"2026-03-23T14:49:47.253461Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/bookingBet-B87_JLwQ.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/bookingBet-B87_JLwQ.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/DataspotTracking-BwPyciEj.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470998; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1724\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tzYuvZfRRCB5L7bC1kPcFsFkzY0Ap910djbJNC5u%2FmoG%2BurLGPHRLh2OMO3TBQDa2CG2ZaLlQ2bcS1f7jnnYtDbVD8DRFskR7QWQWMPyDbGP8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28482e582f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3796,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (3795)","md5":"99ccc64e7da561b23a46c92988276a6d","sha1":"9cb398b846e5aa2c20253c60f58b75bb9a95691d","sha256":"3d0ccb8881488de289b90a7e06f79e8c0fd389022563fa5edf92318345a60d4d","sha512":"6af695ba69344b56a71cd4de31d4fbbff2e6072c4c78d1db246740a8ea2390e4847a6198730ed7c1073c8a1d330b4cfdfec98dcb2c70da0846934dc97841fd20","ssdeep":"","tlshash":"3271e855fc5090baa7f2357df19e7b42772c6be871a19b409f6b8d0c40d084bb534a2c","first_seen":"2026-03-23T12:48:40.620277Z","last_seen":"2026-03-23T14:49:47.327153Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/281/563772.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/281/563772.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 11357\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Apr 2020 14:34:57 GMT\r\netag: \"bf4eb433fc13d61:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 14:33:48 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=e76B.elTkAaAUW0XjRggZZYUdljsNcmBPe8OUUbGT24-1774276472.9828382-1.0.1.1-iBI.oLLr1b5s.TNn.ukzvGOIxTLGQ3_UUV51AiGHrCbIcOVG_SYEJzHDfg45OahtuFgeVwkWP9nqLpT8f7pRbdAj4tbLf8UaYpdPM30uR44xbcNsDpQbMTqLSv8EI_TK; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lSFSDYDsEI9TBZII5ub8yALArQ17s8K7U01nhYi754i2j5jvaSyxMZYDwnwm%2Fs896ALfmRQzmRln%2BMLuJrv%2FN9wveq3jhoVB5NsB4gYLdG8pnwJKpT%2BM0OWmZ%2Fc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28541ac60883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":11357,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"f235242e4531df09db4266316c68b15b","sha1":"152322b0b07394acdc547f29ae992d7141631f7d","sha256":"3eeab8bdccb56885f9df4d3bd8d39715cb75959d8e6c0dd27bb2085ac10c76a3","sha512":"51ca2f8ec0b4e1f6e0c3bd6d94379e898baac732441ebbbf74114b4084a3c14efe73a2e3e33ceb19672f757f15d4ec7f04b68672e5221a11226cea00c732b370","ssdeep":"192:cx+Wn+5yLXNz/TheiADckMNUyXR/iNPGUG368CdPu+nxfpN7JKgdsqqDAQkqLkfG:cxZ+cFbhejMNUyJT3dST1Jpdsqqlb+Ap","tlshash":"f032c061453b5b1394c1ae20638c50f2fec418f8ace306e8cf6c2b5c35c3b3ad0621aa","first_seen":"2026-03-23T14:35:26.179435Z","last_seen":"2026-03-23T14:49:47.193574Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/max-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/max-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: \"7c8224daff490314bbee102edaf64029\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 471779\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e28568ecb75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100307,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7c8224daff490314bbee102edaf64029","sha1":"13aabbb4f10305443e0fbb19c55fd27c149828a6","sha256":"a3652c70ae4477871298cf7fec970ce38a1a5f26a814c06b72cbbafa9c6f3298","sha512":"4a1ac844d0cfc147baefde211336f72422efaaa9c92b4e3a150e434aa3bcd0ca3ab49c34aefca46bed94139738c01ec1af989beb50b48dc747faef0cb8a779b0","ssdeep":"1536:f/Uifm7kUdwddCri1iLc0Lg261F2BBCrikauV3cGiH27PNWE98MGfU0nPROpmi0U:xauVLmi0V0d+tKaK","tlshash":"dda399b2e56710cc7363c22692c1faac1029e370c757caa6f827767d4bc25963562f9c","first_seen":"2026-01-16T00:46:03.978063Z","last_seen":"2026-06-15T21:26:04.429831Z","times_seen":27805,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/analytics.js/v1/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/analytics.min.js","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.164.239.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:37.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segment.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 16 Sep 2025 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:3F:7C:B8:04:2E:CD:A4:E1:F1:8C:5D:DB:17:18:85:E6:C0:E9:98","sha256":"18:9C:5C:43:17:4C:C1:EA:72:5A:8E:DD:37:64:4C:DF:83:99:F4:51:8E:85:20:61:7F:A0:40:01:DC:6F:65:43"}}},"request":{"raw":"GET /analytics.js/v1/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/analytics.min.js HTTP/1.1\r\nHost: cdn.segment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 21 Jan 2026 08:14:20 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: J8ajF9t6IlT2U7tuuuuEWLpJqziHNggp\r\ncontent-encoding: gzip\r\ndate: Mon, 23 Mar 2026 14:33:52 GMT\r\ncache-control: public, max-age=120\r\netag: W/\"26d5c6e9eb5b8acc5d7f0a4acb0bb17d\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07b1d101035e34f82920833b00a4e896.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: oRnDrfNc9kBxsbCxJi3YOcpwGQDw4Yj1tsT79k2BFjeudFMg3L5kVQ==\r\nage: 94\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":108916,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"26d5c6e9eb5b8acc5d7f0a4acb0bb17d","sha1":"f28c859ece3ceabce922bbdf6272f9f7e826b783","sha256":"8ee1aaf2ad1cbca21e0581993206ba9ffd736c611beffb7287581a87cab67ff3","sha512":"388bd8e7a24945d1a3db30cd4cc03f006d5222f5b399b6578eaf9f87707fefae25b423aa0657dffd191f980827742165f1cfe7577a899ac63ed728bdd9886ee0","ssdeep":"768:IAObYQP9MBTSbyDRP0aubWc+ZdLyiQL96+hYs17eFCgt/oJBpntD/PN/xd0MpIJ4:TQP9MqMZ+vCBF/g0vmBuNfftrcuk","tlshash":"8fb371c8f6d6f064439764b4803f510bf23eb96e680e8464f266dad26c7899d9133f78","first_seen":"2026-02-24T14:23:50.976435Z","last_seen":"2026-05-22T17:22:58.310306Z","times_seen":50,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":33,"dns":1,"connect":8,"send":0,"wait":11,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/LiveChatInc-DL6PKp68.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/LiveChatInc-DL6PKp68.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1143\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IblSwYfN4hd%2F0O25iHO9QJaIHt02SorpkmIxKL16C%2B3HE913Dcq5l02OVC02suny2dM42PDGoBoa5LyNFD1tF2JVKR%2BhcOF5PkbxlMomI%2BBNdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28455e2a2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2920,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2919)","md5":"730c0c3c4b92b40fa9126301c858ab86","sha1":"97c8594773d095ff9f92a0bc01b7d23af2c83110","sha256":"769454ef5610850b20cd2cf85581e46b953c9516696f7a9e06efcd63e59d30df","sha512":"d0bb8aa77fb2ea30faba966aabd94e395a55873f5fa9e1b52ea0da13844e8bb91024037c310a137278ac2231f8ee8d9eea19d5f2fb2d47d8f920589ccda24a3b","ssdeep":"","tlshash":"e65133ddc47cb4b1929a67e1323f7b5f711a571a94048c30656d4b0af52a4cbc163aca","first_seen":"2026-03-23T12:48:40.361938Z","last_seen":"2026-03-23T14:49:47.194745Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/css/fasttrack-crm-app.css?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/css/fasttrack-crm-app.css?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: zbjvR4XmwNBIJlxjEvxcm_sn.IUZfztx\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7IQ%2BeTyyQWNvW8ddmI6zWeUxAbTmjZ1xIyY%2FIsMMVyaGTRqMPpl3qn6ID6ECNXHqZEQmJdtD0MqxuDMgrym4%2FFyOTV58AErhJ2jkTgOtzL1GnOpTlbjmcIeVzVz8fA%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0ca6102b671acc9950502eeeca241bf8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: sAQLkHw0WxjUXTip8LJxl8Fyaj9j_jjGj_jUgdCFmxppirZt37LG-Q==\r\nage: 6412\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\netag: W/\"7906aada543698dba1005a917ffae2a7\"\r\ncontent-encoding: br\r\ncf-ray: 9e0e2851db67fb58-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27953,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27953), with no line terminators","md5":"7906aada543698dba1005a917ffae2a7","sha1":"7f00d6655894909587fe280ebf09bf57f66b4100","sha256":"5e2a69854668603fcd556f0b8a3da306e3de6d5ad4dee7a9e9a57ca998269d76","sha512":"262f19709cde3e7abb7bb6d9724437b042fe626636083b80376e35a91d1ea9b39aec82463626711cb60a8c516a1b909d53aac644f056e77929e736fed6d1706b","ssdeep":"384:cFukqharVUf5rKbHWkAB1MG4TmpcHyH3XHZw/XNPalHfI:ckkqharVUf5rKbHWkAB1MG4Tmpc+J6aO","tlshash":"78c2442302c02288ac2b892b73d50599d93ec836651b6dedd7433955c7cb77e3a6b34e","first_seen":"2025-10-24T22:03:16.572036Z","last_seen":"2026-06-19T22:22:48.441807Z","times_seen":146,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":20,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"vsa87.tawk.to/s/?k=69c14f7583c0d2cea24f1b90\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OGE0NzJmZWZjZDU0NzE5MmRkZTllMjIiLCJ2aWQiOiI2OGE0NzJmZWZjZDU0NzE5MmRkZTllMjItNFVsRFV0VGluTmkwMzVWeVA1cDFLIiwic2lkIjoiNjljMTRmNzU4M2MwZDJjZWEyNGYxYjkwIiwiaWF0IjoxNzc0Mjc2NDcyLCJleHAiOjE3NzQyNzgyNzIsImp0aSI6IkJrNDZzNm1ybkNIbHR5eWItTW1DNiJ9.7nvXEGtf1wFzToU1a0c6v6J7zuy0_YubZpe80VKALiakJmdIFLhDpwLIavKE9l9Iw7Xwbfav_emUM7LJIDDIRA\u0026EIO=3\u0026transport=websocket\u0026__t=PqR7cwY","fqdn":"vsa87.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /s/?k=69c14f7583c0d2cea24f1b90\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OGE0NzJmZWZjZDU0NzE5MmRkZTllMjIiLCJ2aWQiOiI2OGE0NzJmZWZjZDU0NzE5MmRkZTllMjItNFVsRFV0VGluTmkwMzVWeVA1cDFLIiwic2lkIjoiNjljMTRmNzU4M2MwZDJjZWEyNGYxYjkwIiwiaWF0IjoxNzc0Mjc2NDcyLCJleHAiOjE3NzQyNzgyNzIsImp0aSI6IkJrNDZzNm1ybkNIbHR5eWItTW1DNiJ9.7nvXEGtf1wFzToU1a0c6v6J7zuy0_YubZpe80VKALiakJmdIFLhDpwLIavKE9l9Iw7Xwbfav_emUM7LJIDDIRA\u0026EIO=3\u0026transport=websocket\u0026__t=PqR7cwY HTTP/1.1\r\nHost: vsa87.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://m.galalbet1060.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: OfS0A/Gtv3RuoEJe6cN/Tg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 23 Mar 2026 14:34:33 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: LA0z59tveXNwCaablo6pgwEziAs=\r\nsec-websocket-extensions: permessage-deflate\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: 9e0e28545b64767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T09:43:02.208337Z","times_seen":17933663,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":54,"connect":61,"send":0,"wait":414,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d224aff.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"87f83aeea14051d9edd97ec3dd41fa0e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 276050\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e28520df975a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18392), with no line terminators","md5":"87f83aeea14051d9edd97ec3dd41fa0e","sha1":"8649c359a630d1c55eb268ff051d5a284ef7587e","sha256":"38a072ee28e39fadd2153244a3f0a48df473ce7d8dfe16e2f2fcbe5d9cd0bc6f","sha512":"c56e03220951ba738fa2f29bec6d02b1de5ca769f1f41c39ff3f12334b16d0a82db78487c4e4cfcd8fdfaddf4af6b923c725af335346028224efa849bc140eca","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCrGN//h6LiJq:SzP2DZSLi8","tlshash":"37822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","first_seen":"2026-02-19T03:13:10.613764Z","last_seen":"2026-06-15T21:26:04.434078Z","times_seen":8479,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1060.com/storage/medias/galabet10/content_751_b304ec6c5de4abffc07dd37037f42c16.webp","fqdn":"icons.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:47.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_b304ec6c5de4abffc07dd37037f42c16.webp HTTP/1.1\r\nHost: icons.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: __cf_bm=gSPSH_YPGT6wuRZJOa._zBHpOZQ7b.HI.mvY_aUVADw-1774276470-1.0.1.1-c4WanWXkKDNCzoo_AAgdxaGsAN5.OaAtOm0aRqSCoX7MuZdJUQhoOB0U3raUNHhF5sS9gZB0OgxAbemZEEi5pKXWdSJr0VsehJFxChWVLMQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 100548\r\nserver: cloudflare\r\nlast-modified: Sun, 08 Mar 2026 12:54:43 GMT\r\npriority: u=4,i=?0\r\netag: \"69ad7193-188c4\"\r\nexpires: Mon, 30 Mar 2026 12:47:54 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 6412\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=zkU5pVgdFGX7oxT3Jerooiut6EYVW5dnfZFKJL0GRJk-1774276487.170015-1.0.1.1-NUDfOj2SX0A0BLbyph80v5jCHX..lXTaXmB_RrTIhLVN0t5.1706ABj_CzIpkMAUQM86uMJ_FhGuro9y3cwk39uxZEJynb0Aoq_BGV2I1nHo0L0RTLfdWkBXlk_jxvFT; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bwy9RDj2WvyXKpyh9yj8sFsTEu4W5XdhXOE4IUQW28tcnyX4HLzNxiiJ%2FaNr0lifMS%2Bxqz6cP9w6iOWKFkLpkTKo5Aqb%2BQK3azHo%2FkcVQVq8z1GL1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28accb1cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":100548,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x738, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f3358060aedb7b493ce23b46b9ca9e94","sha1":"ff5aa26606049ce0cc852fe473306f29be39715a","sha256":"0ca64d6db8e4928ee12dbcefb389ce756871d08872307dccda07235d0eaa844a","sha512":"1fde211c1cd876c11fa023cf260d689d6ff49ad8b383d71d27a4c2de54fc841a6a56ff3d4a6061da64104781b02759067c4084f57662f985b8e38659c1fbc86b","ssdeep":"3072:Ye0KiOysPXweUqR/DrpPFFIexQGlNZ+bd7PZf8oI:YbTcPXD7RXX3lNZYDf4","tlshash":"e2a302ca9377c4cd03dda875a59f128e19c988612b49be504ecdbdf03dac46e5f0e40a","first_seen":"2026-03-13T13:07:45.416886Z","last_seen":"2026-03-23T14:49:47.260673Z","times_seen":6,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 6412\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\ncontent-encoding: br\r\ncf-ray: 9e0e283bee036e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-17T09:23:28.121693Z","times_seen":93695,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/useJackpot-CNwJD21E.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/useJackpot-CNwJD21E.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 450\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qiAgtTZ9QgDlMhUAlOdmE2HYGMFvc27rMbnrtMQGaDmKK7n5Xipr5nsxahTnL82yU95XKbfpUJ6IaCfjCRbtSdZ2zfedOyg8Yojf7WZWZpGkZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28471afa2f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":846,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (845)","md5":"cf614a3a2b135acd3fbb3cc58fe2fdb8","sha1":"71e510e5a1532628f02eaabdbe21336fd68bb839","sha256":"0e4cd18aef6d48edf1e25e902f1c17ab9d03b0798b0e6f90bf7ce8f362ced0ad","sha512":"c2801a589712a671581818d70d5b8e8708add036a53d31bf11b3efe5dc4a28e66303251ba11dae1be8c774169e6777ac8010dfc548bebe85acdf31679a462416","ssdeep":"","tlshash":"5b01efc6408ed5fcf28a48f141b28b6e233c3f3ab60294a0d19c2a5e9354c0eec25682","first_seen":"2026-03-23T12:48:40.290148Z","last_seen":"2026-03-23T14:49:47.20994Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/219/439025.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/219/439025.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 13970\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Oct 2019 07:39:32 GMT\r\netag: \"94d22f5778bd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:47:40 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 6411\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=QH5h_edsVMfvNC6rX6HBShxVYM8iJoJy0BdTz2QyGiE-1774276472.5343297-1.0.1.1-aqpqhl9BEwT0xp3Vmn5QsxYaWql4tE9NKy6fkFvSqwZ1hhHEVP63NpbRB3sD.hDVzBKIiUH.e6DPWWgQ6KMQAqTmR9VhuBiYK4UzwNeEB7DwDCXbJf0tWaT7PCovaKY5; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SgavJNymngYIwjtGJEnlBSY2A1Xcd5wK2mXeHINwHykC3PNXee2AidP%2Be9cPUP6CW96%2F6bs6eUfrGOCsmyszaB4msW1JvmwXXfCJPp%2BlmmWoor%2FainOgWHk9tzs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28514a190883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":13970,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"7672acd47e6c5e906926c781f08a7d41","sha1":"4c6f7562ed8b9206f703130d2d37bd3d0c32efd1","sha256":"3a2e2b4a08f96e9fe6df81c8cc8a36a6a6dc782d262fd0f697346d5ec322be07","sha512":"de1f5256d50b94a3aa146bcc6a673e105995c5b989193fcd55e022e60879e550d57471074adc12ed25e47da0e974f6bf3a0b45cb4c36ad210d0fa9c4aec9fdee","ssdeep":"384:5afVvmj2V2wEOZK2VbNT7IWO98ZGh2b6HPysqH2GiPcZ83:5SPVZEibVb5IR/jvhY2Gzo","tlshash":"0052d1d01f9f279f0d8dbcdbf55ab53b8b085a09a2e3452cbde37772b599804180c649","first_seen":"2024-12-15T15:34:57.642237Z","last_seen":"2026-07-12T23:52:51.274547Z","times_seen":52,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/expressOfTheDay-B7T-lcNd.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/expressOfTheDay-B7T-lcNd.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/GameListItemBetBuilderIcon-qDulsDM7.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=0; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81; twk_uuid_68a472fefcd547192dde9e22=%7B%22uuid%22%3A%221.2BjJm2Ru8bfdEmhmyI0e0lBzwrbjVlKyfuqyviT094Z0rH4XiOXJArZq36QokqXukk928ifllIjG6RUs8jGjNDnoHlrQGQxNxzhcwJRUFF3NXckwv6sIiRTkAhO%22%2C%22version%22%3A3%2C%22domain%22%3A%22galalbet1060.com%22%2C%22ts%22%3A1774276472466%7D; _ga_MCEY36CK22=GS2.1.s1774276473$o1$g0$t1774276473$j60$l0$h0; _ga=GA1.1.82658653.1774276473\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 410\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rDszBB9xNRIsswr%2FqQpsIhTj6UkdKbZ3d9NbaummqToWxnWgzLngNLjfzvmm0vAUGbNqEUdRfkG9OjiVLt3xah65rl%2Bks7JESsGurZeQRTAL5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28565b552f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":759,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (758)","md5":"00881bcc70d70339ab89ce3715673468","sha1":"4b972032e75db287183b5a5a1cdea54f485d6de0","sha256":"758e8666c9b85069fdcbcad7d14245a8225bb43c3f94083cfb5def1ac4160204","sha512":"bdd2a47cb5101caa57b5aecd048ec078098a249d3edbb60bbd8f4ac759306aa54d3cde18851f70e79387c300e12e7726c0aa478cc434bae83a26d4487e0f9cc1","ssdeep":"","tlshash":"1f01fdcaa01df73f1cdba0ebaec49485113078be65b271f0b20f0e8245bd008518fa16","first_seen":"2026-03-23T12:48:40.60244Z","last_seen":"2026-03-23T14:49:47.31314Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/localConf.json?v=1774276500000","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /localConf.json?v=1774276500000 HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276469345; twk_idm_key=Ax1tIpkueYdP8a6wWFjic\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: application/json\r\ncontent-length: 1254\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pyXQ06eooRMsutJY76L1OSyO4%2Bk6Dm38Got1ehF7V76fqdFT%2FmeC%2B9Vkh0dYBEOz16iLITMtdm0VtfLRGT%2FYknrfWaAfqjlvDm9IsvJc5lfXWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e283d9d462f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4471,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b406e9c7fcaf80e5ab91f27ea0f0294c","sha1":"54ddf99952cf9b0fabd829928125026af457240c","sha256":"a327cfe81199467e7773a331449db596ff5a5da012ace64d4ae1889c757bdf15","sha512":"50bb2149cb4177578ffd52d275d2f399922cf5dc4fe93ec9e32b840532d1dc7cbf148a136fc965a7e353fab249d5849f33dba3146a47b9f8053a574661b71f4d","ssdeep":"48:YuTyTbGhzyQnA8qA+9nIok/we+NPhwxbwPAjgCfk/wWp3Copi279lMFDQJSLhHan:xu2ByQA8qAHTwAsAjgCuE56szUn","tlshash":"7391cc9d31458cfec75eeac3788b679f3042811387982c06c27cef4c5676f19650a2ab","first_seen":"2025-12-24T22:39:16.189594Z","last_seen":"2026-07-16T16:07:12.928095Z","times_seen":87,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index-BSsAD_EX.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/index-BSsAD_EX.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 58498\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mQG6yvyh4AqafUi879sSF5Gca4w%2FhKGMk32zXbqpe7BWlFzq7AxTn6GAVvlsGh7KvAg0Cf%2FdoNqj7B7P%2Fkwf%2F4B28GGDusIVaU2P9VhGyQ18Xw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2841fb652f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221144,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37523)","md5":"6e565ce5ef7192da940f1d78c6a6d629","sha1":"aeec0b71986d628fb53ee5148d6514b458e21487","sha256":"e4fcec6668b50243d7726ab1ef7c36ad3650ca34d57eafe3dd18f18a23a50dd6","sha512":"d30595a613672eab15d0b441135fcb635499d42c144554efbc3681b9ba5b67dafca809b8fc35e2c0143726683c80db261157db2fb9cf83306bf88f0bf4704a0d","ssdeep":"6144:BfeL9y0h4R78o8e4YsIALoh6wj9Sd51jjVvFaDIRcDGRD6On:BmJy0h4R78o8e4Yp/j9e5xaDIFROQ","tlshash":"4c240ac4b274b0a556e594d4502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","first_seen":"2026-03-23T12:48:40.281553Z","last_seen":"2026-03-23T14:49:47.231925Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://m.galalbet1060.com/\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-dc1n\r\naccess-control-allow-origin: https://m.galalbet1060.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9e0e283daa8d9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T09:43:02.208337Z","times_seen":17933663,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/events-u_DN57Vs.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/events-u_DN57Vs.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2034\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H2LU3qa6%2FtGEpqg8jH%2FLUAlrC917xGuifeifctX9Y23wx0YYuwFTMMVJXIXuAJh7%2BjXWjyvAFlfyZZDx2BIN8LObV8H8kFofpuuVTeTD6SyPxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2842ee592f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6141,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6140)","md5":"ad98ec9ddada2bcd31bb022c30f7f60a","sha1":"d7a51ade0962e799f9e3e0bd852dfed3b467f387","sha256":"000ff9760d94fe967a26f6c9ccebf318fd3860f73a1e61a546bba7ed1c43ecb0","sha512":"cc97f67671f03b31b9bf8b22c19bebce24caf2b996124f07de0732aa43566dc2723a361e1023a260f248b9b01275f248ebc141fb2fe25bc5abfc0184e426d8ba","ssdeep":"96:7d9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:73IM2sWMtBq6n3PzH","tlshash":"23c144ccb38574b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9e4126b78","first_seen":"2026-03-23T12:48:40.351459Z","last_seen":"2026-03-23T14:49:47.225803Z","times_seen":3,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index-CERoYtiV.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/index-CERoYtiV.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 39025\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ENg18jvIgoQCawIEs%2FDoumlmMeP7HOmxAYJ5TjjM3OJrM2HETgF92BCKPQ2xksKrad%2BGXeoOwZsYVKzEidE5qHs8Bv4heWXdIS1CyxmbVHMULQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28430eca2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":157556,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9a4f057a6712edd11be1db7e3a3235f0","sha1":"818aa867f9d22d94294b9fca43b3bdc4a73fce5b","sha256":"3f1484d2ba3821634b52be157b083d021dfdf9574e1811584ec6647ea260f1c4","sha512":"0e0cc448372d386d814332f146812a13aa0de68db3b243f87f3e45eb0d48a75a6613ac3a37a09e40f668c1d98e5eee2084129f7785bcba38cee54558547f798c","ssdeep":"3072:mPwaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:KwhFHU4HNwFH7MoOWexZFHV","tlshash":"d9f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","first_seen":"2026-03-23T12:48:40.314635Z","last_seen":"2026-03-23T14:49:47.320328Z","times_seen":3,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/if-defined-CWaLTnLW.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/if-defined-CWaLTnLW.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-CERoYtiV.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470271; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 19472\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YNpfyEynAXO8nLjsrp3WMqOLryGLO1zwzQIiBdlS3QbKq7Gt5GeztbASEEEBTem%2FAq4UIl0FlBxGadA8ETow6v3gjT6zBQBflq5g3Pg%2B3cim%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28436fdc2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53241,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18566)","md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-06-06T21:30:11.633829Z","times_seen":639,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/SystemBetCalculatorContainer-8g_IRTCb.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/SystemBetCalculatorContainer-8g_IRTCb.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470575; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 471\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aMcJVkaaMCw2Z89Ynz6FSbp9XIqAl232OXYKk91FytgPP2JS2QjvOUqpTFrQejCCdyXwoxrMIBeGosaGjcMcFdjDhGWGF8V3wCDCx4V6wqUgrg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28455e2f2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":940,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (520)","md5":"793b2b593bdfe7faac33dbea7112d2d1","sha1":"54bd686e66f906771f84d328897ae0fc7d2774b8","sha256":"02a74cc12ffddc9342f181c1656777b44f817ae0dd24c949bbbf07c9c4145dbb","sha512":"37de5bd8a70c48e399a03ba2080ad9c3d1ee419cfee4cd5aa156b2d0accfc4479bb173b3cab98174be70e93b33b59cf27ee4a5cf009dd72b797c7d5a19d58eb1","ssdeep":"","tlshash":"8411dca223a4ce75c48d0fb6099560941eb5030a690cf63875b28c3cf41549687afffb","first_seen":"2026-03-23T12:48:40.316181Z","last_seen":"2026-03-23T14:49:47.182289Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/PromotedProductsWidget-D5uChylI.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/PromotedProductsWidget-D5uChylI.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470775; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 829\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XvkVLm0tnLmTFhf8nMHFGxdy0s75HiSkKYgBN0wR%2FyeWiAGR0z1bdZuEnL%2BOQtSC7fmzCp5oaUhZ5Us0Ugw8Vqxpz3leCh3ceZSAHPrYrHvRKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28473ba92f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1701,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1700)","md5":"bc6c757d757108b7050b7f5331eef44a","sha1":"d6e43452b1e65f5b80e7521a91a80cc74fa12357","sha256":"a366123f1d9682ca691b1e71d61907df384a2afc578b968b78004651f0e1ec21","sha512":"3c1358855d486f9fa8993cc42480bdbbb6a25e784bf895ace6338428bbb08cc1810d7cb0a6b284173293b0381003f32c4efc421dcc3f5bdf2ccbceac19a4deb4","ssdeep":"","tlshash":"133110cad538a37df23d0cfc020511c53a177d28dfb589a1e06aac06d039815ba16fac","first_seen":"2026-03-23T12:48:40.517018Z","last_seen":"2026-03-23T14:49:47.251397Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/useShowMoreOrLess-BVv1yUqK.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/useShowMoreOrLess-BVv1yUqK.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/PopularMatches-DWx3UOYn.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471318; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 413\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Vu0pTwsIyR8ma7xjcwrtd2Bhn7ZRn3fmQjToYrfDz1SewsekLGhZqJMkHSfAGdR94s9NTU%2BR1F3qjvwREJNmADAzUUmJ77D9Xh%2FBxiBMWrNCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2849ebc62f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":726,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (725)","md5":"11f63a5170003ceaf6e02e3adeed9a55","sha1":"f79ac5e167c6bc074520633766ae855bbaff6c73","sha256":"bc5c48665af23b427ca0804cfbac6296caf2116b59da14afb36bb844f1df2fe8","sha512":"a767b61b7f6c03527567a393517e204138bf087fe2908d6197865c1a05bbc53e2937223f08c2b556ef4eb540de0552d32ab4cca07cc92b812cf3e2ec68bed8a1","ssdeep":"","tlshash":"900110cab808f3ba81f816f80179d40570590dbdeb18a8a0a2e64945913c548b75bdab","first_seen":"2026-03-23T12:48:40.410213Z","last_seen":"2026-03-23T14:49:47.222803Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/1/2294.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/1/2294.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 714\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:34:36 GMT\r\netag: \"b0f1ee36f5ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 23:20:26 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 141245\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Q8SLVmwS06VpSfuXAT1Fc6KqDPcJULdv_LSpDwhXSZI-1774276471.8791018-1.0.1.1-OYebGsc8HTKTNpbULklbSwkkHXvT7FM52cEamFYaXYpLFEq3qfXn12lPjf7Im3.lfpo0xiC4Okr2zx_YC6yc0MUfkcwWE3Bs7Ti2moQzVOEUd0lwvh0P7p4lYZAhVMU.; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYUaaTLXrSH6Loz9JZV7adu1NXrpFzxyPZSeOdoT3mlJzLLHabgB%2FUNKKCwHeQpkBr%2BPHZBAb512rtG%2Bf7zEfgkiApv3L0WEzMXv1XZrRhr%2FiWUMXE1I8DSaeLc%3D\"}]}\r\ncf-ray: 9e0e284d385d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":714,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"0c0e3e175d653bd196e747a2d12bd258","sha1":"7d80131896a7f37573137b5ce07cc5919e3bec83","sha256":"ba0d774d456a2fc03949eece01f7bb544aeee31f9b06ecc2cdf9ac1ba86945fa","sha512":"2d336591daf90fcc599b071f168dc7357421fd5633e663377dc6bb8931ed1268ca8abd4445c15deb8a70c7856a3b605cb913448f4bcf769613fe487887902bdd","ssdeep":"","tlshash":"7a0144d50d8f48faf8896f5d89a128104926a5bf09a32cc94a2dfb1837496bc16b4dc2","first_seen":"2024-08-19T19:02:25.982034Z","last_seen":"2026-07-05T06:23:30.989187Z","times_seen":116,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAllListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1\u0026recommendedIds=6db5c2cd78ea5a09e820b7543dacc90bf3b1727e5bbaddff544b301de1f74f39%2Cc57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2Cecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getAllListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1\u0026recommendedIds=6db5c2cd78ea5a09e820b7543dacc90bf3b1727e5bbaddff544b301de1f74f39%2Cc57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2Cecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9e0e2845baa5e9c1-ARN\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 6411\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Mon, 23 Mar 2026 12:47:38 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4368,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1594744c430c14575dd987b06663f8af","sha1":"6ae3a00b9045083fc80dba950b908f9e7513e211","sha256":"db922d127c83813e54ac9a7e4fb61318bdc34765fde199edd3859da07f9b1a04","sha512":"6dbc4888f6eb430e5c148b063707a5488e01f7a4ffef184ac67db37cb847c0d69eff429b0c1bd3122ca4b1594229d6f4f600497011a876d5ddaada4d1fb9569f","ssdeep":"96:nNSNbh/YiOQxX+1A2teUB7SOMVMrhIa1WUqrZurozkhLQtwN:8OQVqfhSPbUK6J0i","tlshash":"ec9110b79f444a5e2b2407c9702d3e9c855e250bcbc09ceaf0c0cf2984f9eb967559a6","first_seen":"2026-02-01T05:09:11.282943Z","last_seen":"2026-06-06T21:30:11.817911Z","times_seen":246,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":25,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/PromotedProductsWidget-D5uChylI.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/PromotedProductsWidget-D5uChylI.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 829\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pb8v%2FfnrKmSXPOjsus2pR%2FMmdBvIvYTSdGqfNWKT%2BYnnQJwW8ctmuYTbcKqZbHMOkwzsKL1euQgmaOcSWujzw5pxh6loYCi2wv4oMCZQHu1JKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28471b012f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1701,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1700)","md5":"bc6c757d757108b7050b7f5331eef44a","sha1":"d6e43452b1e65f5b80e7521a91a80cc74fa12357","sha256":"a366123f1d9682ca691b1e71d61907df384a2afc578b968b78004651f0e1ec21","sha512":"3c1358855d486f9fa8993cc42480bdbbb6a25e784bf895ace6338428bbb08cc1810d7cb0a6b284173293b0381003f32c4efc421dcc3f5bdf2ccbceac19a4deb4","ssdeep":"","tlshash":"133110cad538a37df23d0cfc020511c53a177d28dfb589a1e06aac06d039815ba16fac","first_seen":"2026-03-23T12:48:40.517018Z","last_seen":"2026-03-23T14:49:47.251397Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/SwipeableContainer-DtI8xDnu.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/SwipeableContainer-DtI8xDnu.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 951\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=24oJCd4naxv1%2F0fZpijjkKTJiX1J9%2F8cs97gJLDfPXOTUXXeBIZm0xv%2FW5zfOhjDKTJf%2FinOf4X74%2B8HoT6sGWJw2O8raV1flkhpsM1qChKIAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28471b212f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1866,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1865)","md5":"530881318840c137c3097d1161d60f9b","sha1":"0e6ff33294721f93bb25dd5ae66f5c9b9de44359","sha256":"837d2df39326f7b2f491dfaff92d81147266df5d35b9b98bd2321a19c4650243","sha512":"d703e73d7f7964a647e2658413b461d61bae690fde3a4f8dc5ac89e394f74362b890f497b6a357279377edd7e91bb04c2992a66b529ab467f60b24238a19b669","ssdeep":"","tlshash":"1131b78ad07ada70f522405a92a64474b3bb33a4fa0809e070bd4c2ce73565df71edc7","first_seen":"2026-03-23T12:48:40.533641Z","last_seen":"2026-03-23T14:49:47.30913Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/MarketSlider-DXK8wbIK.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/MarketSlider-DXK8wbIK.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/PopularMatches-DWx3UOYn.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471318; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 414\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIuYhKEcspKBQO9yhxdtAwMyWUlm5jha982Qj0hR%2Bn0nnG44IXEJl7oclnv5ch8fs%2FPiggQ2Q7EciUaDSX%2Bt5phVMGoLL2cK9sTphY4IPZBIyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284a0c562f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":714,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (713)","md5":"88cc8fe3eabc6795dfe917b313845944","sha1":"58b1c48f18b9e6f55548295301960c3500c0d5b3","sha256":"d84b304e37fdb53a32aaf4cd43cd59452a827efa8161820bc82deded5b0e8595","sha512":"a8e21dde7bd9552e11018c7a486893c13f629f33fdf71f4c0cca4a8ee1aa8af38c24a881d9cd427d63ab94df4eb30797ace068f05ed835bdc5863125f8ead0d0","ssdeep":"","tlshash":"2d019cc6b115cdbd52900789b7ba19001b342595ea5090c2f07b0fda1da084dc99aefb","first_seen":"2026-03-23T12:48:40.60795Z","last_seen":"2026-03-23T14:49:47.24483Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/816.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/816.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 853\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:37:49 GMT\r\netag: \"c6b61c56705ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 20:36:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 64693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=12mUy53U5vpiDpWFQq1a9hq62sdwxh142BXNFnJh1Fo-1774276471.8869624-1.0.1.1-SEnobkM7syjCk8Rnl1zxHJNm9ZF9fOKZzcW6gcckPmRJ88j4tGif4Jbiw34avUiMtHvHO5tvUVTfv4a.eDfnkMqzxqvcr_rmIS3ajV4yK7_KN2uBzBdEUwnbvYvf0s9s; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KVGG7SDCRJ3i1wa%2BGh3k8Bv8xs1S1i7ardjLaNcWHlTZzGLhqO8CJEcsVozB%2Bu1ecnc4Vqi6maGvn0l%2BCyHNWZ9AzsYZ6I4aJ1NXLblcZr60Fj3Wjv9Tum3ldmA%3D\"}]}\r\ncf-ray: 9e0e284d38b12efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":853,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"c905dd9a0a8aa81f9d085443e74f133f","sha1":"bbacf7f1cece0dddc2d7580066ab29bbf5a9d18b","sha256":"7b85b6cfadf8de79c85068347c0a557fc1a83fa19b5866adee8c60181b7e5ac4","sha512":"f9dd243a25ef4546d2557221f8eaa7abd0c192e86ce4ac71fe20f9af827a8306605e8a1fb25403abfaeb29d8de6cf6d928ad1bdb943059fa232e5dfdd82a33a5","ssdeep":"","tlshash":"1501e6e3d24607eb7dccdb4228875c80d3131a2933b368118a0de230493671c0110ba2","first_seen":"2024-08-19T19:02:25.975928Z","last_seen":"2026-06-06T14:16:57.274344Z","times_seen":72,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/RemoveAll-CD8tPEh7.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/RemoveAll-CD8tPEh7.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 185\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6411\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JxfCqgXfwWCH%2FQ3%2B3c9yVTBMRg6Ii3mU5hQVflrOG%2BSttFBL9pIVkZqKemxTefbTUkV78v5M%2BUjsV%2FMfGv7YgHol8SckYB70TQGqM%2BcgeOHmIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28516cd82f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":329,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (328)","md5":"fdadfd89d55f9ed03705335de73ec6df","sha1":"4193c848914c623a740f6fe6be7799db40781563","sha256":"24a17f4331e40b4cc190c141a264599e52fdc735fcee673d05bd5c52e309a041","sha512":"328864072a1239c652b75ff30141804f9e4068ffd36a854dd0a0c9992a98d176643c713e5edd7219ca990f9973624c77095cbb86c91695028743b3ea1cb9ae1d","ssdeep":"","tlshash":"b5e04f8da051bebaa9a52ace6e38800670150d6ce739019090fb58546ea85ae721a6a5","first_seen":"2026-03-23T12:48:40.568762Z","last_seen":"2026-03-23T14:49:47.196673Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1060.com/casino/getGames?partner_id=751\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026category=28\u0026limit=4","fqdn":"go-cms.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /casino/getGames?partner_id=751\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026category=28\u0026limit=4 HTTP/1.1\r\nHost: go-cms.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: application/json\r\ncontent-length: 1550\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=MlUp.rLSwvBEeAlWK7SO5yg5d2aeTLGD_ouNpv1RsTU-1774276471.0520146-1.0.1.1-iWX28PSCiPeXIMV.EUKfJN54ooZXoX5PRMmHemBDs5Deh2QoN5nn93oi7zhFwkOFl._8Xaqt7vQ.1Ih7yE4DvxPUx91EX460Rk2mfSfAARN7WJGfNOQ.q7bbXef52n1f; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UeuFZc8h2v6eluO3aJVG6Yw3qL4W0zBm64GPfPUS2lwSItVryz3aL4ppQCPkudlB1RmOBRpVtz8HkmnJBkjhoM7oxNF26P2H0J%2BvBSd%2BEjyY5U%2Fs1Wc%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e0e28480d555a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7254,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cd32d40136e5520099c0a7c84cf9cb61","sha1":"3f5c0bdec52a4dc612472893e6c85ef0d60aae68","sha256":"59d2320edc74839cf0f4a97b601d942d0202064ef14cdfc36cb5c0693079df1e","sha512":"929ad64ace567f32675d3332726467152e9cc95cd1ce252dd8bf5b29b36a77a45770cb45809b441546d8192f971452b9e398965f3ed1cdb8e0f3ac696e8efdbb","ssdeep":"192:IVZ9D5i8OMGdRZnWXH5/5dx9TwzTweonh55MT8TKF1THMPLHKnz5M7BzQBzlpG:u5io/5B75Kayvz5c","tlshash":"26e112264b08fbf71f56289028953d1edcad2bd39c26adc04d7fd8ae01d50d246722db","first_seen":"2026-03-23T12:48:40.670647Z","last_seen":"2026-03-23T14:49:47.301072Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.201.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9tLmdhbGFsYmV0MTA2MC5jb206NDQz\u0026hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=eqr15pe79bc","date":"2026-03-23T14:34:34.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 19:26:18 GMT\r\nexpires: Thu, 18 Mar 2027 19:26:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 414496\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-17T09:39:38.063267Z","times_seen":967612,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":36,"dns":1,"connect":8,"send":0,"wait":15,"receive":7,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1060.com/storage/medias/galabet10/content_751_5b03211821c271295c055f6a5419a0f4.webp","fqdn":"icons.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:47.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_5b03211821c271295c055f6a5419a0f4.webp HTTP/1.1\r\nHost: icons.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: __cf_bm=gSPSH_YPGT6wuRZJOa._zBHpOZQ7b.HI.mvY_aUVADw-1774276470-1.0.1.1-c4WanWXkKDNCzoo_AAgdxaGsAN5.OaAtOm0aRqSCoX7MuZdJUQhoOB0U3raUNHhF5sS9gZB0OgxAbemZEEi5pKXWdSJr0VsehJFxChWVLMQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 57708\r\nserver: cloudflare\r\nlast-modified: Sat, 23 Nov 2024 09:21:35 GMT\r\npriority: u=4,i=?0\r\netag: \"67419e9f-e16c\"\r\nexpires: Mon, 30 Mar 2026 12:47:54 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 6412\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=ZAaLqlFbKQtSS2URDvI0QbVs6Bi6hXnrdadEu32kegw-1774276487.171455-1.0.1.1-1ivWBZEWN1bm3RNKPjOUZJ8ydZpBKCPgkn8fbNGj6ZmEe0MpQp.i2QVCd0MPTsi7unyVcKSlhYm7KIWHCfh5gpAxESPUbEOEReJoQeM4SHWnCG2v7yUw7ZAdkzdeyDdz; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7tzKhXpWWVQ2Kpt%2B7CVxwIxfXegDJE1Y7tccbZAmdS7yghUFAei0c%2FknIYLCiUpsg%2BjxPVqRR%2F0A2sKIfT4Aff1NpnJ0mwSXFwPYWVGhDORlPGq%2Bjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28acdb28b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":57708,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x220, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f16929db3bd93dc672a173d0ee85ae7a","sha1":"1d0ef6cf43bce4068fbcf68e5d46efd959a91a8c","sha256":"a36f47264f2b6baec617931ab1b3dae63ea69bb6c26560189ac230e5a9626b95","sha512":"eaeba531afc26d6f544ff28d7958cc3a1a527d08858c3880e9a9525e963fcc430970dc79c588155a7a334af4f94660187db62e1eb37881ce40f2510e1b64478c","ssdeep":"1536:gTtntxzTpdvRGc8s5WyW3Agy+e9kwvMpF3qgrl:SLfdvVlWle7Un5rl","tlshash":"144302c707753fa3bb103c126d3b719b2aa8a8691e834ac10ff01f2b2160bc79d9215c","first_seen":"2026-03-23T12:48:40.561577Z","last_seen":"2026-03-23T14:49:47.219621Z","times_seen":3,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index-CERoYtiV.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/index-CERoYtiV.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-h75ZG17f.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470171; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 39025\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=if50nrWcrMsRsxAe4ipLu5EzjAaFilukBOHy4wEWVLS4gZ%2BFcurHLE6zo%2BAI2%2FoQ69e9aPHPPqsq12bF5i3TfqPE70QZ4yM7%2FfKbNqVjQgJKLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28431ed82f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":157556,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9a4f057a6712edd11be1db7e3a3235f0","sha1":"818aa867f9d22d94294b9fca43b3bdc4a73fce5b","sha256":"3f1484d2ba3821634b52be157b083d021dfdf9574e1811584ec6647ea260f1c4","sha512":"0e0cc448372d386d814332f146812a13aa0de68db3b243f87f3e45eb0d48a75a6613ac3a37a09e40f668c1d98e5eee2084129f7785bcba38cee54558547f798c","ssdeep":"3072:mPwaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:KwhFHU4HNwFH7MoOWexZFHV","tlshash":"d9f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","first_seen":"2026-03-23T12:48:40.314635Z","last_seen":"2026-03-23T14:49:47.320328Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/FacebookTracking-Czru6uDh.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/FacebookTracking-Czru6uDh.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 371\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kti0k010u9ULgDGEayz1Bn4piN9KvTP55LIgM9pdUfILQr83sjoTHVUJmL3G3dLxRiE967zc%2FMn4tLElFh2hDEzHbsC4yoApmEPCYRS9eGrZIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28454de12f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":680,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (679)","md5":"5fe7ff2d864c029dc415410915ef7e5e","sha1":"ac059fb29eeac2986f9030aaf52baa70f3901edf","sha256":"5cc6e8abbed896255855c4b6d6f52ab386a616de578a4b37d99187e939bddb05","sha512":"86ce1010267cb7685f0d0e49013cabfbd0387a8c5189a38b4e1c21e599634cce6ed8b6e0dce666eefa88c792893b63c3b297b05d0b2df192dd8e85ebf85b3422","ssdeep":"","tlshash":"2601fe0f2c85b479167c18f8d3bbd81426ba590e258f45a5c6c78da9366454a408eb8d","first_seen":"2026-03-23T12:48:40.359932Z","last_seen":"2026-03-23T14:49:47.318757Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/Firebase-BTwtX3BB.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/Firebase-BTwtX3BB.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470575; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 14611\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gqlOwXSx%2FaZ5LuaZLWzaSMWOo7QEGC4TIdcKg7JwqO1B152Red7UgDdVIryyJ1enOrI4jnLJ1hX04hIyRJtwIhsI5FUMN6lSv2RAjiEO7oZuSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28455e2c2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":84095,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4779)","md5":"cf92d3d16e4d2bdbf3e65f816bb67692","sha1":"f87afc1108f6d9b9f16f022bbe0673aac305d724","sha256":"3264e5d305a442ebe38a7992924901527933aa2a372f8d317397055c34849a75","sha512":"9cf7a779eaf4da3780592548b78a62dbf16da0b40c22402fa6f68b5eb7b0d684e7651a49258a4aad9557577ae4c36455d6c90ebfcbc0f502e9da799b2da596f8","ssdeep":"1536:Y4B1ZtLG0w0MlRdcuwMU51uxIZOLphF4yslNmuICMmWJRvebilqVotWL8Avw+u7h:Ys1ZtLG0w0MlRdcuwMU51uxIZOLzF4yv","tlshash":"c983957d7a922a3317d189ab792f50cbb319c64d390f8394741ec0e91e3e45a45faeb0","first_seen":"2026-03-23T12:48:40.285347Z","last_seen":"2026-03-23T14:49:47.185524Z","times_seen":3,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/77c1d3dd-0213-400a-f9cc-bfd524c47f00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/77c1d3dd-0213-400a-f9cc-bfd524c47f00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1404\r\ncf-ray: 9e0e2849cc98e9c1-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6410\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfvWH7-l2WGZEJvxD_-cbyo5fufmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=722+3 c=0+3 v=2024.10.6 l=1404 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1404,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"434c7550a1a937d1e7e8bb8416691d9b","sha1":"d837654b42d1474560a5698cfac3514209cde2c2","sha256":"5f0f065528ec2543e34a03df1cd588b4c4ce7764d1ff62e67cec0677f638c549","sha512":"eefe6cf29ea82af55070456f2bf2cf1ab3c3328938ea092695f0a25370e6cef7ed1da43633a4548b22b46d7d7a87253ef01b2c01847ea84725cd4acc7be813fb","ssdeep":"","tlshash":"9f21e6a32c3914ddefa65f1485a00d8dff03c1a5983ee3d896e83548e5788da6ca00c2","first_seen":"2024-12-05T15:42:26.602777Z","last_seen":"2026-08-17T08:38:04.924287Z","times_seen":2962,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/QvLuXwupqtKCyjBw2xIzFLIf/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/webworker.js?hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf","date":"2026-03-23T14:34:34.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/releases/QvLuXwupqtKCyjBw2xIzFLIf/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 366969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Mar 2026 13:32:09 GMT\r\nexpires: Tue, 23 Mar 2027 13:32:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 02 Mar 2026 05:02:40 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 3745\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":863710,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"acb7d4a922d9a5a1337aa1a24004e1e5","sha1":"9acc0b5a3519c24e1ce224563d475d5a744ec4f2","sha256":"95abb266a8ef0207ba8032e78ee565442c8a7998b9ce06dd72ae5efd77c54798","sha512":"d065a75987917ed45d3235ec749d25f797038d701c93970387a7e77f599fb936dacefdbad9af50e39436f9bd78b08fcfed405c5915ea1c6cdd8f699269dc64e7","ssdeep":"12288:oGRVW37Ok82oIqOHTTQueAQ4CpSen5fIcH6et7YIOl2:rgOksIqOzyAQ4CT5fFH3","tlshash":"4a053ad8f0c675b95332b4f52477100a637d891ac95c085eb2b885f13ab3d4960bbebb","first_seen":"2026-03-06T17:56:23.511704Z","last_seen":"2026-06-17T18:21:50.595333Z","times_seen":8661,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":22,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index.ByCopC5T.css","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:28.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/index.ByCopC5T.css HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 98991\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:35 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6413\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Z1Hvl8p8rtA1qq%2FUXTyjaSlevDF74pEC6Iymh21Q5ZlzJ6Zdnx1IJ%2Bnx2lxISVZmhwJnNM%2FhdWlIj25EIbNMt4IG6s6AK1%2Fw9AYwJPpCst1Rw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e283928242f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":556206,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (62126), with no line terminators","md5":"87506bf4eb7ab10ce18ad0ad9a6bd9bf","sha1":"a5254d1d1340688463b67f81a7c99fbc77be213e","sha256":"0f750b1ca7e6eb90efa9c69cbd6cd0438bdd4354df5c1bc3e059dad64aec614c","sha512":"1dd79525920758421f820186b927b43a08904f925e3081e319b7c30c1ad5698c17bb7f64a9ee9230f013a6e7c9bb0523911121f310a20bbde80df4d5a200e53d","ssdeep":"3072:bXTqmaL/L6Zt4lM9bxqIoOhro6IZpbbeBr0iA8SaQFukUVZM:bjqmaL/L6Zt4lM9bcPOhs6NRFkcZM","tlshash":"12c4d8a1968822f87b37d61f93d1b39cb024f061d9521e6ff58a212dc6d67900263f7e","first_seen":"2026-03-23T12:48:40.66002Z","last_seen":"2026-03-23T14:49:47.302673Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/LiveGamesWidget-D4j6hBCx.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/LiveGamesWidget-D4j6hBCx.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470998; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1609\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kI7JejwYDyKvLzEgBn7j%2FAI8dHMjsCha8taNS3r5Dt8cTYGSqK%2B1fS3x7tqIavfNjUnSuaAcUKo%2BIqdR9GXmkvOTc1UKGf8q3gft1%2FLr4bk9hg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28481e3a2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3845,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3844)","md5":"091f35c911904a6038f4980d1f3d9d16","sha1":"0e0bacac161cf69515965e286f6cf51e627657b5","sha256":"3f108ae801e749475f05e79b4b9da88e4ab002fe3568a8def013433518ff9e17","sha512":"95ec3043e3d8bd4ad8ce38095cd9d686852aa2c223d71790d29b24e17f1f6ac331dd6b8932b86adccae750d664ead998744a53df775e6d0b94b86201c09188aa","ssdeep":"","tlshash":"e581fa87d0bc92fc597e4cc87ab5e34045352a95d3b14550f1ce077913a929ae22fe1e","first_seen":"2026-03-23T12:48:40.507928Z","last_seen":"2026-03-23T14:49:47.284185Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/1/3640.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/1/3640.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 7937\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:32:13 GMT\r\netag: \"f5bc28d6f5ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:47:40 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 6411\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=Ln8VjBs8JvVaIbmgaSwt7RHcQTrHVLxpLl8.8XgFBMI-1774276472.5369136-1.0.1.1-P9ixJkWSQ7BJTsPYnmqdHRiGO5ofyynFcg5eQtai42oKCUnY9c6toyr66BhtWhdyifpNsJ_.tw5A9tGrN4HeZf3erhET67vYXLFNaL.Hxs.wXzfjA1BIulSsgMPwq.0S; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0otmYGhntqpV8sfolxbUGRCyItoY0hcticpGGrtKo42gykUZPUeGneO5Y0TWKLmqzfbrxCKTQKMTymb8efEpj5WJdoG4%2FqWn3owALxbQkPOmqGSw3qpuxoEwhFc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28514a520883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":7937,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"f3dfa4065291db8b548659cc260583e3","sha1":"1d800036e4786df14705ba183815989885519945","sha256":"0ed14919c42211fcacbbea8a8161d193e277b122a6dc1a89424e0e386bb9e9e1","sha512":"1c0d79fbd53ede6225f29805e8fb487a410e9b90833a6088b86cf1b86bf79b2a83ab1d8ba7adffbe683fae03dd1504e408df96eee39a8a492c49a1bc263346d7","ssdeep":"192:f2rbz9qIg2/F/eaneCe4lyF5n/cK/0lEEAgy:f2Jv7IanZe4UFpT0lEEAV","tlshash":"5cf1c00a99d453d5f14e63afef111100fdf7d26302e12a0a9bcdcc0e12625183a451bf","first_seen":"2026-03-23T12:48:40.467202Z","last_seen":"2026-03-29T01:34:27.825509Z","times_seen":4,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/5/11576.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/5/11576.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 17091\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Jul 2018 10:06:58 GMT\r\netag: \"787d92e46c22d41:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 14:33:48 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=MFFYqLDrRz4aHfn2PdrCfnGe1hjMcGr9h03Rrkuw4ww-1774276472.9899297-1.0.1.1-vTeBzPvcwpni7x3SQIQQnKRN5Cv.dSp6xxOttxufa25a8bu6Qtw5Wi9yYNX_5.YZEeCxWOVk8T78rcyzUZrTvc1fSOhJ_UBrQ1yiUr9g6UlB8KBvAcX881KEVtpM8YV5; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qLOlJhvGZFDEuRbo8WJX0QLk%2FuRW7hkuEtgXhonZzUZAirX%2FpFiFFDghJ7M15NsQKWqzWaobXXzhkgOUw6KBB4DJAj3DAwHj9UI3Oq96kqxFOdTrFFTBdQq9OvA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28542b120883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":17091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"7b1d714205ad42fabf9727b8419d159e","sha1":"d6d5f2b40721c4df5e4b026bfe617cd1b3fced25","sha256":"a4ba0ce926582fbe8739b0bc6ca65d0a87631e9fd97be3635c2fbdacf8234bad","sha512":"6c91dbac244cfd45ab3847ad28e744e23b9763672a03dedc3f1477dd3c0b2a9782caf12f7703864987a6d864b0b2336dcb337b0820f8fb6058b8ca16cd219922","ssdeep":"384:C3w4wa7Gj/oBMcsPbKUB2i/ijGvc9qX+AZFagc:2w4isGcoXE9Kc9u+AZJc","tlshash":"4d72c007c5c9b449911fce982c6c499530fda3d239edaa9344a4d1b45c31f7ef274b64","first_seen":"2026-03-23T14:35:26.196487Z","last_seen":"2026-03-23T14:35:26.196487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/10/20279.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/10/20279.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Jun 2022 10:55:59 GMT\r\netag: \"62b98cbf-9a3\"\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=1UL5Z8NGPn9yZI_x9eME33gCuUWSxzbiFA4q1KfhILU-1774276473.0041356-1.0.1.1-elRJecDzqPvSUJV_uomOoBFm0njGORBWDTivU284tGGPFs2740OLLhFWIJzVN2Wn.RjFel10z_BZD.iTldeEMBreY6QkTO4gLYhCnAFwXYJj7cfqH9ZzpDIkKcSHWb2B; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c4qX%2FbN8EBj4ySSb5xjpBIYvcr%2BJOwKruuSreOhD5fwS9BiRPQPgpx6qQ53vmgtvVlYeTsWzyVUOGXh6MM4lvMfeoY9RMSA5g8HGpPkiJkwdEY%2FpVQDweGfhkZM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28544b9c0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"87af8083716421c45adf7b89c550fd95","sha1":"2eede979dce324b9cd8c9e45a4f1d89e27c74716","sha256":"a748f909eba7de62cc2b5325d56fd19af99dde087b3e64d9b759771f9667a356","sha512":"d28a590f64e63a3c78c08af9e4a0ea4655978ac7d5f327c10664f2bbec15013c80b735f97abe45164945e1d95a9a611dc3cd71ff084450c4c554ec3f72e81d07","ssdeep":"","tlshash":"47512c2db451c5b1b0ad894534db503397230cc5eddca7a5ec4e642a0d2ccd9609dbcb","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-08-10T09:12:16.484033Z","times_seen":221,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/orjinal.json","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /orjinal.json HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 20 Mar 2026 23:49:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NwO%2FRzocBX5fCowOIg8%2Bz%2FMnRTQvSKPgo60yBhyFzOnXmF3Wj6o5Id54q2CiSkS1aeXDJJ%2BqgUY3Mu46qGD2hKLSVfil2Pv%2FSVeXMZDLofOTMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e0e283bcfbb2f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":143,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"18b427af3edda5e15c98aba5d93f893b","sha1":"1d5bda36968a667ad97addea16df67342fbc2277","sha256":"4e08113779d3d6d66804a0f2d93d77c31f83e197128f60f9e351bb0de2759982","sha512":"7ba3d67088cd01889faed82a8bbc6546faeb6363cdc9360f7e2872d3c46d8e55088e4bfb205ae90ab5d2a0a1a3fd79281ba476e13cac0be189fd650b77823564","ssdeep":"","tlshash":"76c08c375d01381346aff9d4484039143a098e0a0f64c892e033e86c5c0472110c53a8","first_seen":"2026-03-23T12:48:40.357553Z","last_seen":"2026-03-23T14:49:47.242113Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/LiveGamesWidget-D4j6hBCx.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/LiveGamesWidget-D4j6hBCx.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1609\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EnoWy7bhSAMKweas2R5h9GLJqWbE%2Bdu%2FX5Um%2F%2F08zvY1IFHBHD%2FmyVqHShNz0uat7g3jt52H3RjVeF%2FWet9OgsSxN7JLgD4yzaTZd2b143tH3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28471b052f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3845,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3844)","md5":"091f35c911904a6038f4980d1f3d9d16","sha1":"0e0bacac161cf69515965e286f6cf51e627657b5","sha256":"3f108ae801e749475f05e79b4b9da88e4ab002fe3568a8def013433518ff9e17","sha512":"95ec3043e3d8bd4ad8ce38095cd9d686852aa2c223d71790d29b24e17f1f6ac331dd6b8932b86adccae750d664ead998744a53df775e6d0b94b86201c09188aa","ssdeep":"","tlshash":"e581fa87d0bc92fc597e4cc87ab5e34045352a95d3b14550f1ce077913a929ae22fe1e","first_seen":"2026-03-23T12:48:40.507928Z","last_seen":"2026-03-23T14:49:47.284185Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/MarketSlider-D0nv4XTi.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/MarketSlider-D0nv4XTi.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/PopularMatches-DWx3UOYn.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471318; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1714\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IZPKtr4Hufx7P9RFKP5AOc5FHWDu%2FwtpYjkRrIcvZGnnJ9qmW0pqWc%2FKEkg24VqoU6MlyGt4wyeTD6xSDFQdkQp3pLpavwJN7wBepn9K87k6mA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284a0c4c2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4091,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (4090)","md5":"09da9036327329f84ccd4c750927a23f","sha1":"3626aa33527ee2fc51720bae40e6b72a45a03d8f","sha256":"0d7f86a1e7714aa2cd58d708d642629d5f4ae5fe211ffa66f3891063aab648df","sha512":"f9d91e4c9ad1f0a15b86faaf465e65767e017306b11a1533c3bb11dc2f9a1c64c97a0be78e63fb5a913e15becf52f93f03f9826b07dab85a2dc10a9d226b04d8","ssdeep":"","tlshash":"8b8185c8c039cc6431658cdea5372f13e6743a739bb181d3b0660daa4754209db7eeb6","first_seen":"2026-03-23T12:48:40.346009Z","last_seen":"2026-03-23T14:49:47.202515Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/251/502353.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/251/502353.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 8173\r\nserver: cloudflare\r\nlast-modified: Fri, 23 Sep 2022 10:58:54 GMT\r\netag: \"9f4f4793bcfd81:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 14:33:48 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=xMYxnUe8asVDbNdscnSr1QJqzZBZb7f65mDWyYUXLOc-1774276472.9640636-1.0.1.1-8PMLKlZD2ZDdiQXwL2ia3c3sHu9heA2.RQVLuiTsKmGsbjKUOmp7CmDbEFWVTduHfP_Ydt_FMxZAC7mlovabV2bNEv4Uqyjj6M5ZOIkGmQ9kcq86TTSLD1CAUYnfOLbN; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gee8BurF9bxTFTfWfWxFcOr5ONSVbawhQ6lOVBdwwgIs2UrbHmtOXbfOMA18OUnyWdNizJatGXibn3pmTY9UCNSk7PrhrgHT5MdXwJ12ldWF9JEnD%2B0pLxUSByw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2853f9d80883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":8173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"2341b644727438c7959a2e7d58b1b2f3","sha1":"a26f143919a8516fa8f0625115e1921d67e740b1","sha256":"3908e6221311e726f95ffd66fe3123a71c99f6c8c24b59977c1110aecba13802","sha512":"ac9db6c31b6d59f07102f1abc2c67499f68d90f1364fa1265704c9ed6b127ee75728b8698b0949b8f6beafbf09940df2204161caa60b248c315f3b52c504c9db","ssdeep":"192:kPcaYcKtDcGuxDlD9yxUcb5LnTo/96uM8ufQwcRgk0QRMQY:kPcaYcKtIwUcb5u6B4DUEMv","tlshash":"56f1bf6abf0a58f9d0a4f7e8c482042b2cdb5429f4213298b93fb41d801d1c1ba738e6","first_seen":"2026-03-23T14:35:26.198085Z","last_seen":"2026-03-23T14:49:47.22145Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/lodash-DlcRXxN7.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/lodash-DlcRXxN7.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 57681\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RuV2R7y6eZc%2BcWE%2BR33nSyPHqf6FRiIIjYsFeVw0dhmqcUcLQyHe6md7cYKXE0gYwRbYFzzWYgGSLPwhn4YsSzGrwZXY8YCfeHcwFZgjoQ5CEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e283c59b52f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":164840,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34989)","md5":"c9fae07b3ba1bc6c4c6e4e73bacf0120","sha1":"d11c4e7feafd021ef09e6ce1e1be3be550d11a4d","sha256":"b8f71a0e9157d281426e3e5c2e5f625f80a7f37a0b2f59dd90d3b38458d45515","sha512":"af9974744dd31087f2d3d9d988f4f674f1e6babe839fcecb6d2f56a7908758a94ef3337e32f288f6ca45a4dba31338b81a6c1654d523c193dca8edd675a64d78","ssdeep":"3072:fBzcuEitffnucMUVDAGAmVgfVSVQovSin:fBzI6OcMUhLzVQoain","tlshash":"b2f390c835d7f4a183a7287440bf084bf23ead65a84cd150e1aae0dd7db8919c277e6d","first_seen":"2026-03-23T12:48:40.505282Z","last_seen":"2026-03-23T14:49:47.247772Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/tr-CR7kcqQk.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/tr-CR7kcqQk.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276469645; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 809\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x2Xyy530mcvSgR3Wubi43ZjO%2BOpgbegrRmqgJiW2i52jtLMHzVdfz17emvByVzuqrMG%2BESN8meYhjEr%2BzNhQB4E%2BzHQrSGiOaHBTNDIwi8g2qA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28406e6a2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1438)","md5":"1edc25f8a599f65710b27e0e9e2f3234","sha1":"334509d520b19648232ac177437179777252f924","sha256":"73ea73130879463621f043f68c9f459ab830734fdc449a46447080f82195bbbc","sha512":"134a51681657a724e32c85efd8c8365e185e424f61ed25fbefa2cdfcf46d94c6f8f32152bf6954a2cf5df20000b0bd42d7fe9785e2c66d87998ba0b4db476fb6","ssdeep":"","tlshash":"aa31744d2946eab287016987c92f1f44f41d2b087136f1659ba4d461bab09ee807eb3e","first_seen":"2026-03-23T12:48:40.307741Z","last_seen":"2026-03-23T14:49:47.313611Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/walletConnect-CiycSUBb.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/walletConnect-CiycSUBb.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 964\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eo9pel8%2BiL1rQAkDXNUde6YI%2BkWclBnio9ZonfXdQGnL5NvkYc0sjoI0WMIqVNrFrjuBVim9ZHXC8fuYnaO58xchN2FTK47SIeb5rqXQNwiGgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2841fb882f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1997)","md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-06-06T21:30:11.623634Z","times_seen":1659,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/LiveChatAdviser-DRHwJ7xf.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/LiveChatAdviser-DRHwJ7xf.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 463\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2BbdbMpSG8iNKZUW%2B0zd1gTGpOq5b8dVLOiQE%2BcvpE5No%2FJFr8IGSsv6CXKXf3hXKKQC8rY%2F3wgm0BA3OHNnsGsJE5obtFRqPTHgmGwsFEX7DQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28453da32f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":862,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (861)","md5":"7a1a971f5b00776cb6ff206810e32187","sha1":"75d578592961f4af63a58d575583c14ca11d524e","sha256":"d5d63d0a3f4b910753bc8e6f05608bec03288e4cb39caf2adfef1c80281d1806","sha512":"9f3998beceff8099a1ecc66b406836af08610d74da931fab1a3eda243be5b34e4d07e13f05089f84d9bbcbefd60e3e13dd29b3e03eac5d36347b24e730422c0c","ssdeep":"","tlshash":"a21112e5f0c6e3fe6767288dd76a2043700a4fa5c12d0db5807b19645a6ce1aa30eed4","first_seen":"2026-03-23T12:48:40.385284Z","last_seen":"2026-03-23T14:49:47.306233Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/DepositCountTracking-BoRHw-Kk.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/DepositCountTracking-BoRHw-Kk.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 381\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PB6GV9SFtF%2FbHLUIrqTeVXDWMLlBi%2BfgUngHbjLEmIsTIxGSrOk%2F%2FIn9yYb6gwDAk4STSxCQHmY8lFTswtZIedgn%2FR0Sfp%2BZ64olc4tTIqF%2FNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28455e1d2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":645,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (644)","md5":"3fd6ec90b730f729453f5188855d7893","sha1":"9c631d9eca7f7e4280a4ed5bf177919583e771df","sha256":"d325455799dcc39d884d2f5edee70e178f315a3a4992fd65dee13172cc3efdf3","sha512":"4562a3c2630fccf8689614d749462a48a64bc64a41f18e14d6bbbb2c188caa3d6425c1219c8349b357ed763275b224dc69c8827ef04e754214f3e20577a2215f","ssdeep":"","tlshash":"49f0029768b8d2f68a493ac473c298f373f0650db906c8c385bd4d4b0288003e4d8d1b","first_seen":"2026-03-23T12:48:40.363807Z","last_seen":"2026-03-23T14:49:47.186086Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/FastTrackTracking-DJnY4OPd.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/FastTrackTracking-DJnY4OPd.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470575; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 609\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2FBZTVJyhvI32qMyVqJVM7WRnjdVE%2BHwxiug9NZt8Bux8BV8ZLDOci2ZCP6dDYAeREiqnp3GaPNtmdoKpiTXdqhZue0RI86fnnxCsaFt8B2lSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28456e472f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1321)","md5":"0915e69e82695aa707c7c93022895186","sha1":"48a210838f20bbde6361861f9e3ff75a32f6db4d","sha256":"ee63c8cdad4e59e8694a37703ef249d15d335f2b3ff85e6b57e5ebf9589216f8","sha512":"41c107835a27bb9edfb8df09fcb2829bcb03b6651a7ef77365cc721c482b91119bfb684111e7e33f1556913aaffb3d072f5706c6c2636b603309daaf5b00671a","ssdeep":"","tlshash":"f221534e40e443a47c804e8de3d7a261953d5876711ec4e1b07b0bae3f0ca6a839ac9b","first_seen":"2026-03-23T12:48:40.383753Z","last_seen":"2026-03-23T14:49:47.198422Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1060.com/api/public/v1/tur/partners/751/components/4273/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"go-cms.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/4273/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: application/json\r\ncontent-length: 649\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: no-cache\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=Z21PQVnrMun.8V9v5.csRNvCBWCMuH2YQ_WXME0vJYg-1774276471.047127-1.0.1.1-6lMK456HVejdpMl9J80Mr_49f8T_a6spatSVG7kXX9qmv7si940ANl3ISCq1dD5mo4l8ByN_AtU8fpdwM7TNKPDLb46jv67vnUOhcFFgm2pwnz3_dH_2C78y2xyFBesM; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VESc0hYGGsltrV5L4JsuyhLAwiPTFcrUsQrWlGola2%2BfFI5Iat5GBjS6Iqr4ovumzUEPcBkFsRONjwbpJ5yg%2Bq03SfjoQQPDaD8CPojR6tv792jKxlg%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e0e28480d335a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2145,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"35650e0b6a673ae698bdc6d957b1e00d","sha1":"76b9609e55ac02dcb0982f2efea6b1405376614c","sha256":"18ce5c2fba56a456293b134e14c84ed0b010e7cf2dcd2456d47ccab174eaa443","sha512":"6861e9b5737ee9744ded1def8238176dd4bf82f48235a53aaf4e426d01997cd3318b2472e4f18a0d352da8dcd8e78313b3abdb51fcb6b1dcc37907d6b39bf859","ssdeep":"","tlshash":"e841ca13b42c9cba5b543b00a4d3384a99ad5847dc0e9974dc498f8d82ee73ec6e32d7","first_seen":"2026-03-23T12:48:40.644667Z","last_seen":"2026-03-23T14:49:47.262328Z","times_seen":3,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/777.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/777.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 994\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:48:25 GMT\r\netag: \"709718d1715ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Mon, 20 Apr 2026 23:20:26 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 141245\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=8W4PocslGqwoa.M4WZupcccDsCQ.fV0CUtgUE5AXKMc-1774276471.8793228-1.0.1.1-iN8rEyFWvX2zrem.5faWW6e_N30VhhQPyCqw50bLNq671cNUa0cbvEfqnFl5mwHuqonmypox.GeXFICpV5Jrf_4nIbtHBBciqWA87t5m7b6_vrIfhPBY7lqVvElKhxKR; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GVm8dmydFf9dWnbO4IxwCPbsKpjnjLEOpFjdLwjTgjHwM0%2Fiz375jDM2YeGmZYsEdrYpljaloPHjaewtBGM9G6ILjqg8daV8Anm4%2FwO%2FDG1FnPjEr7WJgRvmeCw%3D\"}]}\r\ncf-ray: 9e0e284d38612efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":994,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"ed5c59265b9af4666679139212ebc3a1","sha1":"9b450d2ceee61ab652a3ce5b04b242bcd8397451","sha256":"c285e946da89534b88859fc27960d4305a721dddbef6fdde055698e159e4768b","sha512":"9cd86a8fcdbae07e193c98131e1e4a79ff8d6077c0c900d47c7e44e03860a8bfbbae11ca50b6f2886ec6c6b5050016ad959c52f85b5fe82fb2b2d6c72f878953","ssdeep":"","tlshash":"1211a8f29245b51bb60ba7e473b0a7e5e94b0379943bad0832159854c649d3c5540bb0","first_seen":"2024-08-19T19:02:25.979591Z","last_seen":"2026-06-03T19:17:53.318534Z","times_seen":84,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/useOpenLiveChat-pArnJzqU.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/useOpenLiveChat-pArnJzqU.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 339\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uobRvoYJc%2FMTXn6i28EL72eAejgylo%2FZlkH1BEA3lozXuYPWiS9h%2BrLI%2FIWylgTzGJZQ8Rzo7jrxhtw9m7PaXmBFXm2KMkh0TK1VHxWLUwFabA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28455e2b2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":583,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"7aa7af1f7b4e2ef91a95308f8c9c4876","sha1":"c992e0e4463ee0dbae8d7c72cd5769f41442b8b5","sha256":"5b1af5bbed06289063c70708480c81c34d05edae84688fa4ba64816c518ebd7b","sha512":"c5d0f1425c8256b8d38bbe058383da45d7733cb78fd8c8b73800c2011fced22a38a269177d8789c139ba760f07e98f944f9e2f85fdcbe37e663b6f0ba7e7828e","ssdeep":"","tlshash":"e0f0e1cb4598ae7c80c08ed0615fa5f46b3807d4700d8501a47a7cda586490586ba887","first_seen":"2026-03-23T12:48:40.344198Z","last_seen":"2026-03-23T14:49:47.316272Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getInjectedListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getInjectedListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9e0e2845baa6e9c1-ARN\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 6411\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Mon, 23 Mar 2026 12:47:38 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":441060,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"163b603e838354454c1e785154ddaa77","sha1":"cef425955b1e8acec587fca01910201dfc29b100","sha256":"4c23e96b95c2a2f415c0bca4febeec378005b2853b75cad1fdc986de2aad323c","sha512":"40e42d8ed45c0405cad29997faffd4c9c165a60483ad66289d6d44c26d0fbf3fb0e707c2240df2d02fd806cced7ef9d96e52369c95694283670a0e18851b4dea","ssdeep":"3072:bnRMpaIBoZbVITZZYA5drAdZ7GlAMIDl3g4Wcmvu7IHkGOQkDWgkQ:LSrBGVIL74WHu7WOQVQ","tlshash":"749444bb8f848f5b1b280bc9212d3d6c999e298bcbc55df6f1c0cf1844f4ab92315566","first_seen":"2026-03-21T04:57:18.893098Z","last_seen":"2026-03-24T08:36:22.981001Z","times_seen":15,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":22,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/13/27818.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/13/27818.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 978\r\nserver: cloudflare\r\nlast-modified: Wed, 13 Jul 2016 13:50:36 GMT\r\netag: \"b07c7f88dddd11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 20:36:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 64693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=lYIEhlwkyZ2xoZVnmgTy.q3tEOZ_DGPcBdCS.g71GeE-1774276471.8870168-1.0.1.1-WNGFCBE.GRVhBRZuJXJtBJs0GYCJ9Klh._8mzFAuGPb6.Zx7mts0ZMJ6H.M77E63BCEeAYSFAloBV79ynw6pdCY6ZX_lHb1A7Ig_6QtL_EN.tJktIvQNRBP_XHJ.aZ4i; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XILr069CMp6nqgnTQ82l8hvscSsbojDGZ2a9jIKFa8rmXrjKdJLD%2BhQABHb9hDMVpwknO1AktIN499cGPmNTbjPkkPyQiboHTB5u6lNbFIAKtlB52d68ba5FaUI%3D\"}]}\r\ncf-ray: 9e0e284d38b42efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":978,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"a884aaf5b301321c0ad133190ad450f5","sha1":"b6ce52555cab8aad75228cd61d088e49b399f0a2","sha256":"e78d15c6e06a4f7ffd9fbc50bb18497001c7b3f7e22a6d25723b33b46ffd0e10","sha512":"2555802e6f615abdbe1825f04bb72082c059ea94e7869558520e298e60446f50bb3a3793be6f2972b919d3957a241021fb230650ebeacbb9aa23cc7687d765d2","ssdeep":"","tlshash":"6d11cccd751a049f851c88bd026bb1d6d61f11ffbc5c0197f001e6787b59c1d20c1308","first_seen":"2023-11-20T22:12:27Z","last_seen":"2026-05-31T14:41:50.244557Z","times_seen":116,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1060.com/api/public/v1/tur/partners/751/components/6713/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"go-cms.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/6713/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: application/json\r\ncontent-length: 709\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nset-cookie: __cf_bm=s659ZJfc0X1QmYeNZ5HuNNnrAot9RL59bYLrb6x1rpU-1774276471.8535419-1.0.1.1-OZG.xOUE678FKe1RgsjQUL5F58Pk127OWixBOG77utmgrH2Oez6OnDL6kpQGUc31jPhjiEN.Dc.rxNcknqIg7bVeodbc3s77cHAGUTSQT.a_3GcxiEZZ.tDEjPy2P0X8; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J2S%2FW8YJ7X%2Bfmq5STGxaDww59Ku0l3Fio9sWCODLXmj%2B7urIwQ3fCytX%2FyhVR%2BHReTkE4eIVv9YqNswdgIc0ZdJMo0hqjWvOgLNp9gfxjgcZrXQHOyE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e0e284d1da1a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2615,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"57bcadb4fc8dd230f6f3adc9cfa648b7","sha1":"321770a05730c5f865b429f3fcc694ffc9fa5ec5","sha256":"1772e571c74fcc1ca93188d5e69f84c965c726a181a7b3d561755c315ef595b4","sha512":"cb9b859208257963cc58c460d277aae9b69d53bb7bfccc6a50c8d87c4bcc9500776b35e7f5268869b4ade92c59c96b39bb491046cd4ea1fab24db640d2e02027","ssdeep":"","tlshash":"f1518b13702d9d6a5b507b40b8c7394ac8ee2447dc0a5670ec494f8d82fa63ac6d33e7","first_seen":"2026-02-24T14:18:16.975259Z","last_seen":"2026-04-23T13:40:26.06858Z","times_seen":42,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/TabItem-Bt7y7Ru4.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/TabItem-Bt7y7Ru4.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 234\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WAMt0K1BBu7jaWkKyqw%2F6ocB4JWmxCmAcT0LDTPCW8UFiRTBLwPOqrGhIUiUEv34dM9D6pnoWL333JaPrlaNL2csqbvgHy7gbzcSOR4lnuJyJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284d7fd82f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":413,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (412)","md5":"634c884b7b825dda5f04f0a154c533e1","sha1":"e57e003b3b1e5f9b4bd7c7d0757a0329268841d0","sha256":"1720ff6d4b0b072f9b8d1a5e3b5e08a66266c86a3fbfebf06c49e4723c4226f7","sha512":"55e8fa1efa35ae3be2b40ac471f8cc6914f4eaddf6191ab97757eab3c6bff160346202ac2599e73edbcc1862bd52c5c42f148ec3755408ab29bc1bd9b7c6d038","ssdeep":"","tlshash":"66e02b42a020f3f5992b54d6d26e94c7322609dcda5988e6a1a32441076e521f74ff8e","first_seen":"2026-03-23T12:48:40.425028Z","last_seen":"2026-03-23T14:49:47.255752Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameListItemBetBuilderIcon.CezZ1lva.css","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GameListItemBetBuilderIcon.CezZ1lva.css HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/tr/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=0; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81; twk_uuid_68a472fefcd547192dde9e22=%7B%22uuid%22%3A%221.2BjJm2Ru8bfdEmhmyI0e0lBzwrbjVlKyfuqyviT094Z0rH4XiOXJArZq36QokqXukk928ifllIjG6RUs8jGjNDnoHlrQGQxNxzhcwJRUFF3NXckwv6sIiRTkAhO%22%2C%22version%22%3A3%2C%22domain%22%3A%22galalbet1060.com%22%2C%22ts%22%3A1774276472466%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: text/css\r\ncontent-length: 2542\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:40 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ek2RQm5UNERbdRgTxxwgZsHZrOMLudDxSsGyjDXTRmO%2F2XHNIGEfdUgztRksi91U6656QyFHd6PbG8k%2B1QU4groNb4na8%2Bqz96UsDNKLHLB8Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28514c7d2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14294,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14293)","md5":"2be5e02c071e8d21cf21a67b7dbd0e52","sha1":"f22bc6376f288fc6c48d781a4e7ee72183b1c949","sha256":"ae1fa6652976d742a6cdb2b7a737fa1af8076f16d05d8b0fdfb1aea27b273d67","sha512":"c889d6da1060ce295af3f82b0c017377a4c4d325710d5907e50e2626cbbe905b3061092387f8c076a062061eb6f129cdab01cdb23cb8c7939159ac4aa56f6598","ssdeep":"192:bJniDy7erF1R7/WrgLyczjGi3bo2K/1y8F8yyonbyi3ui382QRl3/OiVViVZA7RV:bJnAp3lGvu893B3j6PhVwVLHdQuwoyF","tlshash":"dc52f07fce05316c797f8568e1f01e8010178211ee326ae8e753da2fa9da58f193576c","first_seen":"2025-12-01T08:13:59.522693Z","last_seen":"2026-03-23T14:49:47.239615Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/wc/rewards-main.umd.cjs?v=492854","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.4.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /wc/rewards-main.umd.cjs?v=492854 HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 23 Mar 2026 12:51:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: l_cvZnmk1L.cA_UEFxRqO72ZWrYc2T6N\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XlhSSKkQGF%2BPjXKh4UpNcGCLwWm5oTdw%2FWLKypmMCi%2Fc1e8V3q%2Fsm16vWpb61tJpBPun774D8qVKYKJozDFieoeZOBcQb507MJ5ogAoaYswN1WXOlBykIxH4%2Fy6v4w%3D%3D\"}]}\r\nserver: cloudflare\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6b590e690e32695caa633ab770319d74.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: EoqZGAFM0VVhUun80ks0XIVsQeE6_CXHq7hWrE9QAVsjhI8TkxkM8Q==\r\nage: 45\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\netag: W/\"8aa892732850a447c954b9adf0429164\"\r\ncontent-encoding: br\r\ncf-ray: 9e0e2851eb88fb58-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":994310,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35585)","md5":"8aa892732850a447c954b9adf0429164","sha1":"c073b4a6853ffdac2814363470f440edd8a3693b","sha256":"4d8c414e135ea161c5bb067b86a21abe9c90ae468228303e8bdde911afc496e4","sha512":"429cbbdb90ee95369e39014f961faf3a3a3d452348ed7bc569416004c3354b49aaafb9d5346f1fd614324f2ae3e49ec785fce848065ede68d42a4ecc11820d6d","ssdeep":"24576:blh9atcN1lhT6Pcgr9ojYVCcCLrLZSObZ5uYeiolhaLx7hOdFakK9ND:blTatcN1lF6Pcgr9ojYVZCLrLZZuYeiz","tlshash":"70257d9072567534c3b795b260be0508723c5b03740ac5a8f2bc99a92fd7c9a627bf7c","first_seen":"2026-03-23T13:26:58.857916Z","last_seen":"2026-03-23T14:49:47.298786Z","times_seen":3,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":21,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-4fe9d5dd.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"8249fafc9a9fbe0f75d4bef0aae2305a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 460626\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e28526e1475a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-17T09:23:28.082723Z","times_seen":50244,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/fonts/default/RobotoBold.woff2?v=22","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /fonts/default/RobotoBold.woff2?v=22 HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index.ByCopC5T.css\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470271; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 62032\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:38 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lf2IVl%2B%2FOdtb27zoTRRA0G3IKcrDDfPY3FKCNMDE4%2BHPBwHvwl99eN1JH5X1diKFL8%2FG0tmqTt6Up6i2w57t8C2K8dn6TcWRC5Hjpe7T8gLX%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28444a502f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":62032,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62032, version 1.0","md5":"5c3f2196f147bbbc3583de1008be7538","sha1":"b1d65e305e850cdd352734f7842cddfd30f08d0b","sha256":"c6213e789895a427306e62a03b1a96ac884f58957b4f14e27f8e4361e32bf382","sha512":"a0a556d7d670c7197f1daf9cc7d84b3872cbaa92f916bd092c3831d3936362ddde3e837e4330895a5d53f0783b761ded7d00d126a0a04feaea84d01d12e62f1d","ssdeep":"1536:+07i808sgDXsqfywKCgqTwnXO09CU+O2G48I5lkEGN2iBYF5cftfplD+2U:+epsGXZfeCgZXd9hAGtI56ZiF523+2U","tlshash":"2f53023e9427274226b1dcca96ece2ee16c278fb700119ddb41075ee9f32f814c83a56","first_seen":"2023-05-07T18:24:32Z","last_seen":"2026-08-15T11:25:22.013143Z","times_seen":2674,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":16,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-6289ff8e.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"79b4aa69d45c4b43f0b31fd971b1bbdd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 223892\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e28527e1775a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"79b4aa69d45c4b43f0b31fd971b1bbdd","sha1":"77122463966366aaa969b55f404af7903b9d8f86","sha256":"34b9a3ffbb7a87b04fe51abdb665588b82d1e5fba4cad27b6d6518228d20c2b5","sha512":"6bc666c4e89838ba9d62ccba15b642154cb69eb86ac22585e64e11eb0bca2ebc710c3c5cf8993a99aa85035e1ae44d566601f6b7649e7d92fa3d72a2f53f252f","ssdeep":"1536:BigMTWFu196wufn32jGDdgaOFUWbaGlDluK1MFY7dZPkx3u4V5pfYMrlSf:4nmuTilGhmPx3u4V5pPrlSf","tlshash":"36a3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","first_seen":"2026-02-19T03:13:10.618029Z","last_seen":"2026-06-15T21:26:04.428904Z","times_seen":8427,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/420/840548.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/420/840548.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 11150\r\nserver: cloudflare\r\nlast-modified: Tue, 13 Jun 2023 07:42:08 GMT\r\netag: \"9c1f5c8eca9dd91:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:47:40 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=krtgz36.8wJTQ5tP_4SXZjx8rX061Xa2voL0.aNtptQ-1774276472.9732585-1.0.1.1-9_9z5AfU0X2ZazYdqJzPz5lr2Auze13DTDju_LX1nPB9m9HNpeGVGRfGX9jG22kV1_P50jSNtFFr14BUj6qJ9GcnHeLlZa9B8TVktL4H6YS5S.Gnd.hnEpjUPg0TRbNg; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=in8AHimRddxHFUhPfM7tC4y8dSSDipmH0GYodLL1Ca%2FYUf7KGPdYYAUH1x177aimBe2CVY7%2BaI1Y3hosOj3vWEtkNzSXjhsbJpl6v1HeOoPJTSsraePWotN1K7s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28541a590883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11150,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"dbbf32ef847225a7d202e68653fae18f","sha1":"2de33dd54cff59463909bb829b075e013a64b575","sha256":"15a19ce0b5613f484c06ab556ec8c8ddcd7783a79fc01efa52da734e8701e6b0","sha512":"c01e52c3bdac46ca77f01bdc9d24e04a2064a5c101de1c82ad2240a17bdaeb14c00f36e011cc576cb99a4390d94d52c8b663fba3d0c3c3fce000bab324778f16","ssdeep":"192:T92rFVkslthItUObQfV1CHpYJalSMVv3MEnkssnCpLNxuXnCNu:5COyDObQfp7SvMEnk+NIH","tlshash":"e632cfeb7d8ad2c4b8647510011bb856b2f7927f82e3cca66f4d0f257244d39420d48a","first_seen":"2026-03-23T12:48:40.411839Z","last_seen":"2026-03-23T14:35:26.207374Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/8/16336.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/8/16336.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 12360\r\nserver: cloudflare\r\nlast-modified: Wed, 29 Nov 2023 10:25:37 GMT\r\netag: \"177af65ae22da1:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 14:33:48 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=xbhcnF4aqA8pR_RxvIfy0yJ4aNguMM5dg.lgh2D89VY-1774276473.010347-1.0.1.1-lIKHxdMQysifMHVxsRYyr6BTgnbJU.QeLajatvtNGTQP4AMyGdCZgBJQxSZ4ifwaquKHxwjolsAkErffQjW1oqiVslD8dVwcCoowmYkEl99gv8qf4UMQLpsXwVhMczn4; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fEKNyAvHTu7ney9CJ4uS8iu%2BWJ3RRTaohnxKd9Svebt2ANtvnC0L1R5wxZOjX8Bnl3FZi67WTGjZtRolNOmS%2BnseUxMTZGyT4om4JutHf0Uf6Occ4FYYVP%2FVrhg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28544bc90883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12360,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"28c825f0c68f469df1775e4670be8dd8","sha1":"ef26777d59e416508ee3f668d73d3de6a67e915b","sha256":"c1d82d04a973e2529c058cbf8b7f98b8dbc363464692dd9890f410f2d93b3667","sha512":"1f23fba20bf5bd7d73a4eb47ef8dd7bf942c7fb0173dbc62684e95685ce6f2ac11d37f027fac84e9996fbfa965fe74ce505fabb498199fc1dc24d722fa0d1c50","ssdeep":"384:0/PYw8KCL40/crQKat6HnfBzn0XLcM+GG3E:6p0krQKX/BzDMfEE","tlshash":"0242c0675a0b4c866e4fa502394469b3562d5c1a2fbb9320d7382a31e0fbf514864fe7","first_seen":"2026-03-23T14:35:26.208052Z","last_seen":"2026-03-23T14:49:47.225234Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/p.js?f=sync\u0026lr=1\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:37.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Feb 2026 19:28:29 GMT","end":"Fri, 22 May 2026 20:28:25 GMT"},"fingerprint":{"sha1":"36:C6:D1:CA:01:47:A4:1B:73:8E:62:DB:CB:24:79:4D:06:01:3B:B5","sha256":"11:41:34:A5:A1:10:2F:10:C6:7F:8A:F2:77:75:66:AA:39:99:F9:E7:00:8D:1E:EE:4E:30:42:B7:A3:82:28:31"}}},"request":{"raw":"GET /p.js?f=sync\u0026lr=1\u0026partner=139a886e39fc38c92e86d82c241e5af2bdde29b6844bc7ddeb0c099f62648e4a HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:37 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: 9e0e287309950883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":697,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"cebc7667967e601f02df39ba19712d86","sha1":"c7d3677008d76115cc41ba1b734aad112c743dbf","sha256":"089867e58a1de5998b0d74b779119d8a30fe54616ea3ce76063a5530163febea","sha512":"80a26888852e4a15ef49580494958b710628b404f4026c5b218daa918280b24a8f2fcc698ac49ee66c6e9b91954c54f5f296abfd4645d71cc32c83d4ba199378","ssdeep":"","tlshash":"2b01c07d5b86312454f634906b2bbb4a743b12be5c535808848d0414a3a8bafa21add8","first_seen":"2025-12-24T22:39:16.348988Z","last_seen":"2026-05-22T17:22:58.055376Z","times_seen":51,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":41,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-23T14:34:28.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; path=/; HttpOnly; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=moiD994oINlUiAvCvF%2BdssQLxl4QxXyIRdqLX8V30YMlGD7%2BSRMIM0zcoGR0iIniB4I4xYdJrYmG%2FJ0E%2BtFY5OsFgDhsVqH9WQX3uTrlsX6Xvw%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e0e28374eaea106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"CodeIgniter","description":"","website":"https://codeigniter.com","common_platform_enumeration":"cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*","icon":"CodeIgniter.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":3252,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"754bcda8408954c41643a8c04162f9fe","sha1":"4c43da722552deb21ed3e9e6f456eb36d7beb6e9","sha256":"5be8fd09ebb59f685424f9bc9e6b3a82b38fdb830897832163816040d4d80687","sha512":"f576c658c47d0e867f6dfa622b0946fea25e88f1a6b64a3556a0e5b9cef28c79daba2a11fef92ce1d7308a99dfad411227bbfbcf3224c38c36f93fa5410dee45","ssdeep":"","tlshash":"0561ff172a40dc1d13318685b593f80ccb52f547ca09ece4b5de96af2ac6bd5c0f381a","first_seen":"2026-03-23T12:48:40.438709Z","last_seen":"2026-03-23T14:49:47.221956Z","times_seen":3,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":29,"dns":1,"connect":8,"send":0,"wait":153,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/getMarketsAndMarketGroups-DHDRKPWQ.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/getMarketsAndMarketGroups-DHDRKPWQ.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1808\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2Fv6OFdA%2BA%2FWOaZPLMvTQYfZuflHrURS5dWRlsClw7SvY8pl12uUTNbKQEcv6ouHlTWBezZB%2BdpQKWj5rzGsMkH7y7nM07%2BrCuEDyEX%2FgWfP0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28472b5b2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7270,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (7269)","md5":"cf3ef8e236f9c455217d7ad1372fa3b9","sha1":"dbbf5401084368be58e9d43610b9ca82cfb36f09","sha256":"36d659322203a0a4fc314c72eac1127e7612fa21fecb4df4971ff490c09b0ebb","sha512":"5f2e024baf668d7b6cbe46c040ec75b4aa52cdbfe3c27c356d89344b1f3cb07053f75df422691723f47cbec37acf848fffff04709eb14b8fa86a0e180c84d3dd","ssdeep":"192:Rr3Fwk2T2D2E0iP1XjkHjjkHE2t2p2A2V2+2DPAPpPuPQPkPAjkRjkKjkJjkPkjE:Rr3Fwk2T2D24PRjCjt2t2p2A2V2+2DP5","tlshash":"b8e1e29e912e6c46dd7f063cf6c12b26bb333f8136440695f9de539da509286312a328","first_seen":"2026-03-23T12:48:40.348229Z","last_seen":"2026-03-23T14:49:47.249862Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/88/177595.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/88/177595.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T09:43:02.208337Z","times_seen":17933663,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/BetslipControlsNumpad-5uPhIi94.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/BetslipControlsNumpad-5uPhIi94.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/GameListItemBetBuilderIcon-qDulsDM7.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=0; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81; twk_uuid_68a472fefcd547192dde9e22=%7B%22uuid%22%3A%221.2BjJm2Ru8bfdEmhmyI0e0lBzwrbjVlKyfuqyviT094Z0rH4XiOXJArZq36QokqXukk928ifllIjG6RUs8jGjNDnoHlrQGQxNxzhcwJRUFF3NXckwv6sIiRTkAhO%22%2C%22version%22%3A3%2C%22domain%22%3A%22galalbet1060.com%22%2C%22ts%22%3A1774276472466%7D; _ga_MCEY36CK22=GS2.1.s1774276473$o1$g0$t1774276473$j60$l0$h0; _ga=GA1.1.82658653.1774276473\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 881\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uijab15CbBZ8YDyURHQF4x2Qiive2iTTpbtXH5S8pVqkxkXznM3octdm4799ZDNUW975g3k%2BfxlIW5fNcH4WFlTyHxUKAJT9VCFHLXx%2FUv%2BM8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28565b512f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2607,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2606)","md5":"ddad8589eb1888b52c33db968bee65f7","sha1":"6a2b6affe09846d16474a308b4c31f0d52fe81fd","sha256":"b42d3a3d5a10bd50ce5232a6452341075fb91b8a17294fbe009e38e1ce08edac","sha512":"98cab2b5dd6f95118a38bf6a30fb2b0d3970d882068da08a396d7d2fd2a1f0b99fbd9829ddcd0d3628f27d5424db22ee6330e648eeb31a957b2d2f9b1d317aaa","ssdeep":"","tlshash":"ee51ed51b001abbde67786ceb53e0024b00f2ba9d66811d7e47dac60bf6965570432df","first_seen":"2026-03-23T12:48:40.294625Z","last_seen":"2026-03-23T14:49:47.285306Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/walletConnect-CiycSUBb.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/walletConnect-CiycSUBb.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/WagmiConf-hdcVY1tR.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470065; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 964\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LvQJUaWmkoDH6lagPzgiFsccw5NAO5S2ixpFVwWG0ZlYamYUGhP%2F2QnRP%2Fm2gDdrjlo0utTTEhioPc1ZMSCEvbTx27ew7eh59AsPdgTPEU3hpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28425cab2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1997)","md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-06-06T21:30:11.623634Z","times_seen":1659,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index-h75ZG17f.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/index-h75ZG17f.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/WagmiConf-hdcVY1tR.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470065; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5861\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kxlTnE%2Fe6ekL0CcQrELLGb67jnJ5vzk2%2BaAXnrB6P0Iw0dqywvteqopv5ok3UVfyToLuIXScnWD90C38BxTzqKsW0VzZIYcmJVNbmqKHzTumwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28425ca72f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":18027,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (17806)","md5":"e6fb5f626d229ec37be21290a0b075e0","sha1":"cc3fa867dc94d03668dac111dcf3113dd4301ebe","sha256":"e504d4704eb38187c36019a064d0bee4d69927438fe08c7f2805081e77a45bc5","sha512":"e909939889e127dccada323fe75003905e68c679aa8f9ab84a0221c8b470d2302f09162c12a7d855579e66fcf38c49824a2a34a4903e54dc6fa7dafa591a84f5","ssdeep":"384:0Mci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJD:0Mci408FFnJrIjE3D/OY2E0xqpc1NKki","tlshash":"818209d0e3b4f7a642e86add80392074f2248c28747dd0f1b6b6edda70664ca856dd37","first_seen":"2026-03-23T12:48:40.531882Z","last_seen":"2026-03-23T14:49:47.299999Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/MarketTypeFilter-BZbMG365.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/MarketTypeFilter-BZbMG365.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 426\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yNXRQHPyYYXLxx20ZWq9r06U7sarZoD9%2FmOE9RcxyNJ4jQvUfvM1ehwUZ0SMDLU6R8uBSoYH0dmVIl9J%2BCgcwZQ2hVk2c2boJtYZoRgbISMyOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28471b102f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":868,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (867)","md5":"5f35170ee9978d2966bd15452d2b6d85","sha1":"787ece6ccf338421310a96658c32766d3b28be54","sha256":"e003b1f8d7897a3bc2eac6580cefcf1626913420915d7a43ecc3280fe5c057e2","sha512":"d0af2fe38994087e4e80171f5529c494b8261fd966958359627279b6893c56bedb8848d3a16e58bba934b422255eb95714fe31416c7551e5cf7a1270826d74a6","ssdeep":"","tlshash":"1911ef45f748e3bcf23b1dccc56d481893210aa99b2946e1e02d1e960b51986a22ee8b","first_seen":"2026-03-23T12:48:40.510581Z","last_seen":"2026-03-23T14:49:47.207799Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/e30d09fe-c0dd-4b61-81e2-d6dc09eb9700?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/e30d09fe-c0dd-4b61-81e2-d6dc09eb9700?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2472\r\ncf-ray: 9e0e2849cc94e9c1-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6410\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfSFghIByqO-qpSeiAGASfCVErfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=17+5 c=0+4 v=2025.5.1 l=2472 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c9bbc32ce28fd80253987f2e1f0be287","sha1":"ac50a6c9aaaa9a3fd32f610e9858fecee25be6dc","sha256":"9b9632ed8ef4f6d25483053b956d22184ee488efd3f8c22e0ef2626b974475cd","sha512":"5863d7231d17d3edf58896ef5332bb631d9a5c27d06fb934be7653a6847b8918e92ccb66090e97c8b96f5bd51b3c9ae112d2c4eb9407cfe8f617da98ea3d3dd0","ssdeep":"","tlshash":"f8513b2e28bac5e8bedcb4ce2f90883a3283b7511ad4c45552d80854e35fb41a1db0d8","first_seen":"2025-03-01T08:57:15.902828Z","last_seen":"2026-08-17T08:38:04.923282Z","times_seen":2846,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/fonts/default/Roboto.woff2?v=22","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /fonts/default/Roboto.woff2?v=22 HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index.ByCopC5T.css\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471318; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64248\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:35 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6415\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1kGCrW6oy9rYa3lrtxqtpqsb0ujCoNLmyOItR7m%2FOf1EEkXuXOOL7ew%2BYDk%2BWFFCcCE6yOGzshEM69Nzvl2xcTTowoCm5mMyfCD%2FxzoXzcQ52g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284a6d802f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":64248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64248, version 2.0","md5":"b65b078c2f62cb030e8faa332896afec","sha1":"d5af06e579dd5f400f803b4e24bc1020740b0b8a","sha256":"594544184c059f885e1499c36a4147c3d3b41ce4f50252ac245a3a5faea6c72f","sha512":"34c06275b329ac62dddd6eb3981ef47d022d4e841c6a2659b9c648e77caf58277c91d1aa1b1bc432cbaccf9e3a7c89e67a3f41c940637942e692c90db9d910e1","ssdeep":"1536:T4FysiYyiqM4dWrgU2Tx5hpx1/VjrHS+92eTa:T4FyPY+rEATHH/xye2","tlshash":"df5301e2be45d926afc2dbeca3bd561c210eddbd2480d11717d5eaa002c1dbaf07c252","first_seen":"2023-04-17T11:05:44Z","last_seen":"2026-08-15T11:25:22.038867Z","times_seen":2801,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/219/439025.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/219/439025.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1800\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Oct 2019 07:39:32 GMT\r\netag: \"2e32315778bd51:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 20:42:03 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 64347\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=5bMNbw9myNjBwruLMAb3wnC4KVolAEihZEX3MJ57.FY-1774276471.873969-1.0.1.1-ERctz3HM567QdElzTEfbINY89Yt0kxBlLYFum8Ot.cmGrqAmLudnMY4UIOt50ttimb8wALFBfnQBC0Uae_Flko.d7UuYHrUgai8i3jISFpWsHdvH_tjStqgTRMbcI0LP; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4J2pJ06z%2Bbgh4FJzn4EK%2FoBPGJM8mnp2CKfKM63IrncI78IXDbsyBEoaegFoxUvSTDhtB%2BjZg8UmxjNUOm2IQRzloFkUtqinnZAiZP6%2FbOwCuU6df57CDw4rWCE%3D\"}]}\r\ncf-ray: 9e0e284d38192efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1800,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"410ca6161bcf1fb896f0f9cc0ed9aee9","sha1":"1166bdb91b71b4e279126a8101dd92f58b0d2688","sha256":"657202e7cff3f3870f0bdeb5e94747708ed2c13d48a1a77631374c2b2c52ad7e","sha512":"ca391dc8ddd6ac2a05e7b6e1cef4096305732466fb5aaef9c4cb19a8defc4b8a29a0c8fc714dcb1b46c9848d5853e8a1f5bd283f2c5396b43c798c4be3f4fb04","ssdeep":"","tlshash":"d43109e60f4cbc683c5bef44f109a872b8548da7c1741c9124ced5fc90929f78a0eba8","first_seen":"2023-05-28T18:20:13Z","last_seen":"2026-08-01T05:50:48.894197Z","times_seen":314,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index-BSsAD_EX.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/index-BSsAD_EX.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/WagmiConf-hdcVY1tR.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470065; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 58498\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hni2IrHvZDaUK8vcNYIZTV%2F0BrvTbdDHrcm838wP6Jooc2p9z4KELLhZ0ItmUmtBtakhZ6QfrfUp%2BfGHO6DKscBgsPM1dSKwUG6a9yuslFcqMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28425c9f2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":221144,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37523)","md5":"6e565ce5ef7192da940f1d78c6a6d629","sha1":"aeec0b71986d628fb53ee5148d6514b458e21487","sha256":"e4fcec6668b50243d7726ab1ef7c36ad3650ca34d57eafe3dd18f18a23a50dd6","sha512":"d30595a613672eab15d0b441135fcb635499d42c144554efbc3681b9ba5b67dafca809b8fc35e2c0143726683c80db261157db2fb9cf83306bf88f0bf4704a0d","ssdeep":"6144:BfeL9y0h4R78o8e4YsIALoh6wj9Sd51jjVvFaDIRcDGRD6On:BmJy0h4R78o8e4Yp/j9e5xaDIFROQ","tlshash":"4c240ac4b274b0a556e594d4502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","first_seen":"2026-03-23T12:48:40.281553Z","last_seen":"2026-03-23T14:49:47.231925Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameListItemBetBuilderIcon-qDulsDM7.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GameListItemBetBuilderIcon-qDulsDM7.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3290\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6411\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YSBgRSKMJW5MXO043hdwX91RcmhupOM1TBenNpGjqMfJA6hTRs2fjcIuZHxq6VSFDEWF%2FpHQn4Hvkg3jrB1le3qce3XvY7P4HUSt1FDsDSXA5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28515cc12f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8010,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8009)","md5":"89d8dbf1d3cc9b6566bbd0b62a5b6a6b","sha1":"77f8f433e62ba027dcbf6abb63c8f4efba7dd1ae","sha256":"65c2589783ed99926c760b9332ed75a23b11bac653fac505d751bad36f6ae21a","sha512":"73d4402e4e6cb5706895a30e39dfb73327f58f45b28e43f2585bedeb20b7bf759b6c353ef57e8141b82124c8585ef234cd46d612a263872fa76599870e806647","ssdeep":"192:gbZq46rRejxWAdQTFBzwaYbnSEhogZ1yi3VAr7e:gb44KzjwhS03Sne","tlshash":"eff1d849e424aabe953a4ca9e47e8455301e2f48e66609e1d03f0e1b073c8d5736ff9e","first_seen":"2026-03-23T12:48:40.564139Z","last_seen":"2026-03-23T14:49:47.224628Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/TabItem-Bt7y7Ru4.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/TabItem-Bt7y7Ru4.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/FavoriteGamesContent-BzXk7Hhx.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=0; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81; twk_uuid_68a472fefcd547192dde9e22=%7B%22uuid%22%3A%221.2BjJm2Ru8bfdEmhmyI0e0lBzwrbjVlKyfuqyviT094Z0rH4XiOXJArZq36QokqXukk928ifllIjG6RUs8jGjNDnoHlrQGQxNxzhcwJRUFF3NXckwv6sIiRTkAhO%22%2C%22version%22%3A3%2C%22domain%22%3A%22galalbet1060.com%22%2C%22ts%22%3A1774276472466%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 234\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TGd3I1QIppqkWwQKrIsKqJ9I9zH0Jn%2BvfsHvo1OJ3L5iYc7KBR9fbtVOaM5x6s3Zg5THQaBnAxdQOt2cMlhYTmIA5IcFdX8NLGQuzUY94IpaCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28516d002f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":413,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (412)","md5":"634c884b7b825dda5f04f0a154c533e1","sha1":"e57e003b3b1e5f9b4bd7c7d0757a0329268841d0","sha256":"1720ff6d4b0b072f9b8d1a5e3b5e08a66266c86a3fbfebf06c49e4723c4226f7","sha512":"55e8fa1efa35ae3be2b40ac471f8cc6914f4eaddf6191ab97757eab3c6bff160346202ac2599e73edbcc1862bd52c5c42f148ec3755408ab29bc1bd9b7c6d038","ssdeep":"","tlshash":"66e02b42a020f3f5992b54d6d26e94c7322609dcda5988e6a1a32441076e521f74ff8e","first_seen":"2026-03-23T12:48:40.425028Z","last_seen":"2026-03-23T14:49:47.255752Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/log-performance/v3","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"POST /log-performance/v3 HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 94\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":94,"data":"{\"logData\":\"{\\\"socket\\\":999,\\\"register\\\":0,\\\"widget\\\":4313,\\\"script\\\":4171,\\\"download\\\":142}\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-k6t5\r\naccess-control-allow-origin: https://m.galalbet1060.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9e0e28586f0f75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"fda44910deb1a460be4ac5d56d61d837","sha1":"f6d0c643351580307b2eaa6a7560e76965496bc7","sha256":"933b971c6388d594a23fa1559825db5bec8ade2db1240aa8fc9d0c684949e8c9","sha512":"57dda9aa7c29f960cd7948a4e4567844d3289fa729e9e388e7f4edcbdf16bf6a94536598b4f9ff8942849f1f96bd3c00bc24a75e748a36fbf2a145f63bf904c1","ssdeep":"","tlshash":"0e3000000000000000000000000000000000000000000000300000000000000000000c","first_seen":"2023-04-06T02:18:46Z","last_seen":"2026-05-10T02:19:39.188302Z","times_seen":38514,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/custom.css","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:28.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /custom.css HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 2241\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 28 Mar 2026 16:06:34 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 167273\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j3MB9Awh4gqX3re7rkvPl%2BGZ9OFscx1aGjyX3%2BKDFpbDSofLo83OdkxlnwYywrf0biT9796tqs4B1xV2rj%2FNSDnayI44nGqQN2BrxYOY7kt9Iw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e283928192f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8221,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"63318f971d51e8ed941a6db824e579f9","sha1":"6aed26adae6fbe771adc6f96467c814edb092d20","sha256":"1efbe4c6ee517c548599c862da943b032e0159eea8a8a86842be762101ed1a2e","sha512":"1d29c15c42640b8435e2137ebdf3908d02a185870fbed759c9d48f1f172fc8285bf384b12e8896660016df4b60d49a4aff84755d42190b89858831fd83959c2a","ssdeep":"192:CHuigeWca7MAyWUrqXxTlXnhUiUeUhQnwMruqY2VGi8a2C:FxTLXHLETxC","tlshash":"9402cb43f9e31644a1ab928859abb7f87e7c505387089db97b80b3349f8b3c28131b54","first_seen":"2026-03-23T12:48:40.395457Z","last_seen":"2026-03-23T14:49:47.285883Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"0beffdc96a1a1b35b5ce2759d6d1d51a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 6412\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e283bedfa6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"0beffdc96a1a1b35b5ce2759d6d1d51a","sha1":"8d9d42c92a1d18382b66ee353d3b81b8641ced00","sha256":"e27dcd41e84265874a28c43fa5780e5ddabc8cae4fa0d010d0ca18360e704389","sha512":"6c5f688f184fa65416108e0f6af9947e741b70ccce5053b318e8ed64858d9ccd6e6b2f905103bb3871e540ecfb7a85efb0503c539bb4545d6975c34aa58dc090","ssdeep":"","tlshash":"7f4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78849815afb6","first_seen":"2026-02-19T03:13:10.681687Z","last_seen":"2026-06-15T21:26:04.412918Z","times_seen":11137,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/anjou-js-proxy?seal=02503637-3458-4264-a556-a663e82c28cb\u0026domain=m.galalbet1060.com\u0026t=1774276471067","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://galabet.winwingames.io/","date":"2026-03-23T14:34:31.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /anjou-js-proxy?seal=02503637-3458-4264-a556-a663e82c28cb\u0026domain=m.galalbet1060.com\u0026t=1774276471067 HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IJ%2BtbsNSn9p7MhtOVR%2FO8y3FotjygfKeY5QMwC0c3N1wIe36cZEYviWj%2F%2F6bGcCUWICAV3ANBQoWV46rc4pp2LlpSK75a3io9CXarHqpq3IZ0B8FHKI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e0e28484a6a2d96-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3031,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3031), with no line terminators","md5":"69af97b54c671a4e5b34618cbaaad853","sha1":"96b474df0a48af308ce6d0ad66951be2df60be98","sha256":"30adc6ef5644ea9e58921375a11b51b742dffb6b96d2872dbe056a080a97256a","sha512":"d800538d8b98489cd4eb6581a605c08827131423e5355a461aad487cc3c6a10f6ee9713ad0442694bbb721acc36b58f138fca8ae62be1608ceef6e244946d45d","ssdeep":"","tlshash":"3b5123eb6a9085ee13ce55b73f27728cd25fcc4b3aa11447ea246c907944a25c6bb234","first_seen":"2026-03-23T14:35:26.214767Z","last_seen":"2026-03-23T14:35:26.214767Z","times_seen":1,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/img.png","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.winwingames.io/","date":"2026-03-23T14:34:31.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /img.png HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\nage: 44\r\nlast-modified: Mon, 23 Mar 2026 14:33:47 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G2Vo5wdzbTHqL3zrpWTthEVBsJnlxkJ0qb%2FDRRDEZQTr3koHYtqlKSq7A9ot%2Bg04L5DODiLYp5JP6jAgAcK93RYEeTtwy6b68BC0Rkqm8OWIlb4YpXQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e0e284d1d4c2d96-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"2ad3a45d82e0940f4c3dc90088721bdd","sha1":"a85bbcda89334914c332b2315aa94f32c843c867","sha256":"bdeff9d8a5ad9b3cb7dcfe91fe91080359bc5a836d18d2f78e1d308c412d87b5","sha512":"06a4f493c0b3fe9ca7ecbf17347ce0aab1e3447c4c62e2876b945fd13f40140cdf11b66e8a799492d8709ba21ccd90c54c7c5f446370bbc7e2579d0b0477360f","ssdeep":"768:VQRzoYMic5jrKBzf/csKDh/GxEsBJWnO2iPRvzLsiWY:KpMVjOzcPVOKJn1iPRHx","tlshash":"3ed2e12fe1997b7a550136f649372eb5124b0e5a54c3f878c31c68a8c217b08cef5ab9","first_seen":"2025-12-24T22:39:16.249591Z","last_seen":"2026-07-19T15:19:37.892402Z","times_seen":86,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/expressOfTheDay-B7T-lcNd.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/expressOfTheDay-B7T-lcNd.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 410\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6411\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WcaAKd591blkyXw6fzDhzPHsrLtqcc2pHS3gjKq0d3nRuSr0rVFvQfSFo1m9OFkFof3LT3XZRjChT7Wc%2FLWyRZCX3FIkIKVLuDnbmder2DqtNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28516cef2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":759,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (758)","md5":"00881bcc70d70339ab89ce3715673468","sha1":"4b972032e75db287183b5a5a1cdea54f485d6de0","sha256":"758e8666c9b85069fdcbcad7d14245a8225bb43c3f94083cfb5def1ac4160204","sha512":"bdd2a47cb5101caa57b5aecd048ec078098a249d3edbb60bbd8f4ac759306aa54d3cde18851f70e79387c300e12e7726c0aa478cc434bae83a26d4487e0f9cc1","ssdeep":"","tlshash":"1f01fdcaa01df73f1cdba0ebaec49485113078be65b271f0b20f0e8245bd008518fa16","first_seen":"2026-03-23T12:48:40.60244Z","last_seen":"2026-03-23T14:49:47.31314Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"rgs-wss.galabet1060.com/jackpot","fqdn":"rgs-wss.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /jackpot HTTP/1.1\r\nHost: rgs-wss.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://m.galalbet1060.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: N/Su1ETzaE0G/u9ONKEnrw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: __cf_bm=gSPSH_YPGT6wuRZJOa._zBHpOZQ7b.HI.mvY_aUVADw-1774276470-1.0.1.1-c4WanWXkKDNCzoo_AAgdxaGsAN5.OaAtOm0aRqSCoX7MuZdJUQhoOB0U3raUNHhF5sS9gZB0OgxAbemZEEi5pKXWdSJr0VsehJFxChWVLMQ\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 23 Mar 2026 14:34:32 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: oK+jf2sZRL4QPEg7I6POv89L390=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RWvmCg4Ml4qfukXQ74ce%2F7YhQYLxLgjnzT1qV9EXdHQTcZATDVYewxx%2BtNm0XuhMztGmimi5i0cWGf%2FKbHQvHlTeHdpc1BwB5dDxLA8NMncLMgibT%2Bf%2Fh%2FrZMFGmF6Vi4VA4MvrgJ4De2A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9e0e28526e1ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=510\u0026min_rtt=486\u0026rtt_var=141\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3124\u0026recv_bytes=1363\u0026delivery_rate=7554782\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=c4edd67558dd18b8\u0026ts=133\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T09:43:02.208337Z","times_seen":17933663,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":36,"connect":36,"send":0,"wait":102,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/NotificationsButton-CB7B8FLB.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/NotificationsButton-CB7B8FLB.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 350\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wXeglvRJJAdrAkKUP3s%2BayON76BqRE7ZHcjHWHuqrxxZZa9EZhbQ7a8r7emHsEoa2%2B8ZFD9iLwXyMgFcvA6cvit1uSu44Qkgmd%2FjNLUCzfV4Kw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28453d972f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":558,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (557)","md5":"0e022315f157d72e3309d566233f1dfe","sha1":"284ff846b84c64713f2fb946f38f6f3dc62b136c","sha256":"3e91fe9e173e5930927fb72b0234a87d7766ede59cf93812a41d2b3a654dcdc7","sha512":"99599f85b065c3ca1adba0154405e729d1966a77e49f6c5316da0396bce45f5c2687c48c0d494ddfbda0d0b1313e19b6738ee4cbe9bf723ffd44bda2d40a4898","ssdeep":"","tlshash":"0df0c647a999dcb51bc3467063379015293e682daf0a544004ab3c95177005ac55f95f","first_seen":"2026-03-23T12:48:40.341597Z","last_seen":"2026-03-23T14:49:47.212494Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/InternalDataspotTracking-DZHbA2K4.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/InternalDataspotTracking-DZHbA2K4.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1470\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qlr7pJTd9c8OjQF0rbSC6m1dDiD8bARfuagoBvL%2BWhQs7Txu2vCeDxuimHFCoHDSDhB7twZsWK0A1cv6wcNS%2F5hyvOKo07kKnx8CcmoZErJqnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28455e202f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4012,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4011)","md5":"11da725be76bb8886a2752d6941b21f1","sha1":"1925195191d9f09d4a24262941fe45c057e84196","sha256":"029d649b0851d1c6309944d56cb7b71e2f57780e1a2552d3aa05edafee2fb345","sha512":"025b0f87a0551e3d78d7fa354bdfc8514cacd7c6c1da2971a134a8f43b0ab30df1f8647379a3cd8fcc683abc459df8a4a3c9b802273764200310fb0919957586","ssdeep":"","tlshash":"6381961fdc3c08b0b060c6dc5837d566856c3c96a690dcb060378eaa661fe45d7f6e97","first_seen":"2026-03-23T12:48:40.283618Z","last_seen":"2026-03-23T14:49:47.233737Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/useOpenLiveChat-pArnJzqU.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/useOpenLiveChat-pArnJzqU.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/LiveChatInc-DL6PKp68.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470775; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 339\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kZ3tvMUydumW8Kz1ATCLS2QG%2B9xBBKVPQF6q8S06pWUYxQtUFFRoOuph%2B%2B%2BTwWHecFb%2FLX8CAcjqZ54Ts92I7CY2y%2BQRN4vDuhk%2BX1oKBsPoog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2846fab12f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":583,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"7aa7af1f7b4e2ef91a95308f8c9c4876","sha1":"c992e0e4463ee0dbae8d7c72cd5769f41442b8b5","sha256":"5b1af5bbed06289063c70708480c81c34d05edae84688fa4ba64816c518ebd7b","sha512":"c5d0f1425c8256b8d38bbe058383da45d7733cb78fd8c8b73800c2011fced22a38a269177d8789c139ba760f07e98f944f9e2f85fdcbe37e663b6f0ba7e7828e","ssdeep":"","tlshash":"e0f0e1cb4598ae7c80c08ed0615fa5f46b3807d4700d8501a47a7cda586490586ba887","first_seen":"2026-03-23T12:48:40.344198Z","last_seen":"2026-03-23T14:49:47.316272Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/Odometer.Dtmtuu8d.css","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/Odometer.Dtmtuu8d.css HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/tr/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470775; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 377\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:38 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IiFgY31%2BM3sQyEaG1n1vnjcVbB3zmMTfIpPay8R5Z1X%2FUQhrm%2B%2FevyA%2FRM6fzG91m3TIgEBHO4vxp1r5bU1MMV2iEJF2HjytLxbqt44Rgvk06w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2846faba2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2758,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2757)","md5":"e60bd0b6b84d162ff84ef731b11ed036","sha1":"09af532026627df2629f1a98a049ee8c50194631","sha256":"8d2a9d2617a60055e91c6b16f4cabd14851836edec7bf90fc8760e1d31a39df3","sha512":"a85638b5f89d49c50da5f9dc0cfaceec033c45f524a51bbf266fe9cf67f9ce63ef157745964b9ab7c1811f8e2f2d2c5d6348efebe6818d6fa5beb8291e36c725","ssdeep":"","tlshash":"2451e1154f910364633a7906b5c81b51bfece5415223c58e7329a447cf83db9e398e1b","first_seen":"2025-05-18T15:21:59.195484Z","last_seen":"2026-08-15T04:45:46.192519Z","times_seen":310,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameListItemStats-Bm1vNWgi.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GameListItemStats-Bm1vNWgi.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1433\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rjNaQbrnzbuMx4X2SH3mQDZHjMQZKZf%2FIHeYSzS4oZdresEZuRRe7z0a%2FHdjLdZe0loH%2BKj%2F6mBJuLVVUxTCP2iD%2BeCAg%2B9D40%2FoAbIXhQ2VpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28472b242f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3575,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (3016)","md5":"3f60a0a0d328ba59bf948348c43a0d76","sha1":"551457eec97eacb140c81ec1cdabc40b0d1ba927","sha256":"3f05a290ce7982a318568937d38f30f92c5111b8ea96e47d79306e9ac0d82d06","sha512":"8de7e251d92c2d26c2dd6743535f334b49176acfc91c39b1dc61824554a25817705b1c02f28f97efc4dd5e0a8762e7760fd3bcb3b08377c2daee3a8174d5f9eb","ssdeep":"","tlshash":"f8717482a1309f7d75260cdd69af2a60202a0755e919c6e595bd1f3f367800e3327f7c","first_seen":"2026-03-23T12:48:40.302588Z","last_seen":"2026-03-23T14:49:47.291249Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/JackpotPoolsWidgetContainer-GF_Y9WrY.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer-GF_Y9WrY.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470998; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2589\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6sarSCDCJuHaBIN25AXKn2IRFCsb7DXrxTB56pwSIzkU9p5Mampt8%2Bs2BlqV0eRsr2hbw58YEIfs26dhSl2lDMRM%2FPzSE1%2BharhO%2FZYpCcvktA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28480dfb2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8121,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8120)","md5":"64c6590df221a20c1d966b70118f4346","sha1":"761b37cef4c23eb2e8dcc3d37422d135c128574f","sha256":"39103e32497aad940193356b77f09e7cdf5cb3b57dd6a770be3272c17fc26057","sha512":"5427c32c4f3da7c2104278c5420cb2c151b08b4c18fcdd26c11625a73167e409d874801dd724bbb9c4d34fa0704bea201b6528259167e26f477eb9a551496ac7","ssdeep":"96:VTSM7oF950GU0iXfLTeWIt+GrqOGtJTQzrexg3tSHWFeZ69OAF++TZSejMM2VQ0O:lSM7eU0o2r2Oecf6OtbewcA/TZSjSN","tlshash":"a5f11108e456b7bcece94893597f503c365f0ba9d7a504e4d0bc99344e6c88fb605b8e","first_seen":"2026-03-23T12:48:40.390524Z","last_seen":"2026-03-23T14:49:47.238945Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/12/24157.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/12/24157.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 5083\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Apr 2018 07:39:28 GMT\r\netag: \"49f7a63868d1d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:47:40 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 6411\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=uzz1bBAzImf49Uwq4YuVR1gq8atQsbTok0Oncl9oloE-1774276472.5249295-1.0.1.1-xDUwOHNHxmAnROICinHdlBpnlg5HoJLtNlMEyN4hmIqeNmcxBX8vNluDz.tjPN7maRIK2RmrD_dBEB9M3i2KG.BojcdmF8xpuwXtpLaw6L9H33hmcg5r4BDOrB9OKrFR; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZUS3LV5v4VCvd2MAeIGu5k0QRutsX%2FzHAoFrxm4keZdOFrPZHGDXghs6sxrckuN85wXSbYHxsDfVRMwVJuMXFHIGFSRqHrtHF5sbs59HybKbm%2Fdfp8cB8CS6GtI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e285149d80883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":5083,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"7259189255ccc9dc5ed61a408a73a21b","sha1":"822b7a46e0fa64fbb3f51d0571e860491b514ef1","sha256":"d718b734b2057fd9996906ed76a0adcf0756dd7c5de627b411278141f2dc4f29","sha512":"559aaa159881e65c293d23cab715e2128ab4b57b29861eb90b4d709ba35520a75ee29ff4d881be8eeb705fef9d6ffc3d17b38aa9c75dff03cace4de6ddba323e","ssdeep":"96:uubV9FKWtguoe2q8jI4pbuIxk7h1ogtxjRZSptTkLs5rsImu5lS8+ZOKajb07u:LbQyguoeaI4pq1r9RZAZR5kdIDeu","tlshash":"99a18e371b7ac92bf870521c579b21c4e85c136ca292804fcbb8dda2159ce6091ad79d","first_seen":"2025-10-15T16:07:47.333571Z","last_seen":"2026-03-23T14:49:47.246409Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/12/24362.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/12/24362.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 13204\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Apr 2018 07:31:21 GMT\r\netag: \"46fe831667d1d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:47:40 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=QTkFx8XCMQU2UqToMnAGG0zs3XJHf1fwJi9zEGP1CAY-1774276472.5347-1.0.1.1-XBRFQXCqNGHFSwNsH8ZwgFhPSDRI.6eTsZxkpdP.zZ9WVerXZCzij6H3J8Guwp6KFfHzT4ikcSfbab3z0zn439b7t2.TZxpxNQGLYl33Dt6LamM7cKT4puq76yJgescE; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZSeQseeCehHSKDol0%2F7p7Rm91wKtVfBNT6d4XD%2ByK7k3fFfHWVXWtIq047jFOG%2BTh3BTGE5RXvWYhj3IMWKqtfABKVm%2BgakmxdAICs5N6otYzGRHC9edUdVyLo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28514a360883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":13204,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"a10d01670844b13a954e301f57f91e08","sha1":"a65a1fd428b58c49de56396188829f656afda17b","sha256":"0f31e89b7057b03e7cd1e5473bd55fdfd63ac0c4226a290c2555a822121a4eee","sha512":"1c0b01d45b2945153564b619d922b23c55f565620b34d025772131d832c087b070d544c68ef9e0aed40568d20c7a862650ea145c9d25c8aaad612ea631977435","ssdeep":"384:o4LlLzFzedLN6Oa7YzfRuTwnJx6Pd59RSy:oWzedLN8eQkx6V59cy","tlshash":"cf52bfaffca1ca19970745a966b8224c7b531e767c6cafcf3c54dc39645880c1286fd8","first_seen":"2025-11-20T21:45:06.605758Z","last_seen":"2026-03-23T14:49:47.305707Z","times_seen":4,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/WagmiConf-hdcVY1tR.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/WagmiConf-hdcVY1tR.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 33247\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIh2lu6wueVn%2BdN4%2Fd4x4krMPj5I3P6rpu5%2BjO5CvF0pV35m0H%2BgM01pLEEOD0R%2B7vbuVpSabtFaMWWEjA1LSoRSQzMI%2BZzH0MBcIHEeNbSdxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2841eb582f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100979,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48215)","md5":"d9a67fbe6ddd947fd589197dd4add431","sha1":"04e1f6a83784e34d0bfd065b449b7d75bd2f0f39","sha256":"537b74af8fee027461b3174e04db51ef96ed6c992747a6e5f1eeb2ecd57d9db4","sha512":"5188f717eced8a9b9ca6611d9532eca5062fbf928837056a7b7a9445761b46d53e00b377a3998addd43a28f642c986b24d82e87b55217d844f850dc3366fe9d5","ssdeep":"1536:42Caz30CdwD7ZajZlOxjMij4Yx6uxO7kaUhvFSEy7XUF3waG1RGYBsEUt0s5PIAT:pCaMRx5xO7TUqYEUZ5PTR1K/XGl","tlshash":"05a35ad07196b46103a74ae008bf440bf239ac35200e465cf269ecde79b96e99277f7d","first_seen":"2026-03-23T12:48:40.300203Z","last_seen":"2026-03-23T14:49:47.28359Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.galabet1060.com/api/public/v1/tur/partners/751/seo/page?platform=1\u0026country=NO","fqdn":"go-cms.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/seo/page?platform=1\u0026country=NO HTTP/1.1\r\nHost: go-cms.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 2659\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Content-Type,Origin,Accept,Accept-Encoding,Accept-Response\r\ncache-control: max-age=600\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=x.89.7.jOcVyF4honl13S8HU.bDA4LedIMN4c0_s568-1774276470.4987578-1.0.1.1-vRrt7aS..3AZ3WPrRcNx1WJt9s2Su7vVs1GyZFAggoM8KHJCAt.D5cFexp8SDo31dqMS9ImpbQoc2eX4iBRypnRvVGxZwk9Wb73S7oFZzoe1kO3sDOVHWGPGyIj_LkOA; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Wk%2By%2BpEpw%2FthGxjv0IGMRP%2B6VdOmDY%2FUeET51wqCV1t%2BZYwiVuDOw9NjPMiMJsWKszXIE4lAhiMAI2mijKd1XNTsvKaY%2FBQ3DrMHuhLcHM9vxagoME%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e0e28449ac25a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7671,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c3cb355e0745f8d403e214af1595e2e","sha1":"ed786d0ae61ad6adce28150c04a932c4e9bcd6da","sha256":"2b7c48aafa192476fcb639519893f40c28c1de98bd5e66b84769edc55b047be2","sha512":"1c1840626aba24469d43e66cef0893e9627c25afee6ab6a955e6cebf21946e2cf3514c9587cae3c5815a3b7b5ceabdb18cde0fc4b6d5cc52e798e14c7c456b62","ssdeep":"96:E2K/6TXWpoS1kKXplSunUVtRQl8bqOHEyj7fuSE3Ytvkeu5Jbrt:E1yTXENDplfnUtQyDjJE3ovy7bJ","tlshash":"76f10f0e37962d9f038a5fca29564d3c4fd55386fe41a91c8d63ce1e2bcd278d22ae01","first_seen":"2025-12-24T22:39:16.082152Z","last_seen":"2026-07-16T16:07:12.954484Z","times_seen":76,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/ButtonWithAction-BLYSmFxL.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/ButtonWithAction-BLYSmFxL.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 192\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5r6%2BjcmTSLr%2BIG%2Fj5SEFaev6%2F%2Fx0SdP4dgPyhTOj2ksLv7%2FiM45%2BeMvFMIZJwSTpZ9stZwz3YCB17veXW4AdXOIjNphSH7G2kAG6XlTZzXo3qA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28453da52f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":267,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"2e9c1bbfc27a80927619a931fc4a71e9","sha1":"063b2f6681cad181f0afeb2d1418c0a903b51849","sha256":"eb7b34068e48ca7e28588cd4be978838a758db62c428a1823f2e0db1260bc52b","sha512":"99a154cbd0b8e3c46482970acd076a872e1acf06f638c1dff0facc7f13a787035b59219f9762d03ad83e7917735613eb63c4b368f59e6693e1d24bf050c7b3a2","ssdeep":"","tlshash":"08d0954b5495d5f603d276f0a327c0112e196d64f7988541804d34503a7195ec53fa3b","first_seen":"2026-03-23T12:48:40.309467Z","last_seen":"2026-03-23T14:49:47.233145Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/FavoriteGamesButton-dN714PS3.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/FavoriteGamesButton-dN714PS3.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470575; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 281\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6mlRZpz8Vp6E6xb0%2FNzs1m0N%2FOdudDyjy9usbifBZ6QGDAG4Ac%2BBQjGhOcVAn8VXJmBgCuGmVnjaSr9fmIm8NVj%2FzVxihNeOE%2FcvEFjXt9oIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28455e332f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":427,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (426)","md5":"828fd99e3d19001747ec2f0eb0af7009","sha1":"9980992e4715518e0c1e6a9d58e120044aa98d8d","sha256":"8eb17858648977906214aba5e0a924408c6c9daad69bf84fe5b6c549fa318e99","sha512":"d7a8474a8d5683f9262a60c5e8b8351ff52259cc321589b25bb30cb4f76305944e0c30324adde0da9d905cbb90479a8762951556a4a397b5134efa6c770f9a0d","ssdeep":"","tlshash":"65e0ab4bd08de2fa2b832be06613c024282ea47ce75ce090409e286439b045bc91e96f","first_seen":"2026-03-23T12:48:40.567392Z","last_seen":"2026-03-23T14:49:47.269894Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/3/7893.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/3/7893.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 14503\r\nserver: cloudflare\r\nlast-modified: Fri, 04 May 2018 09:49:11 GMT\r\netag: \"d76d4d278de3d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:47:40 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 6411\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=85eK5XEly6uvhGtfkaa.GcDr1Mlidywcol1REHn7N7Q-1774276472.5307057-1.0.1.1-nEpFBckkOBVhDi1s7buAqQtBgmZdc6AF3.5Ys2h4NcCxV_AM1K2hjvbWFJKBYTZ.gxVZNHRYbos2M8HtdaBCLRQ5qxvLtWufz.pbZeEYZtq1PTYS7105aM9l20J00z45; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZvRH62AUCJdBlcu%2B%2BLw3Aa8GrcJurp%2B8dxJ4K9M7BjjyPpnXz%2BISi9hxqzjb63HSHfo8n%2F0q3qQJq2X%2F05PnZ3PLth%2FX6XaFnRWwci8nih4rBLI3i7y4AZTw%2Bg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28514a0b0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14503,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"7302f7f4f504dc87c7af7b7d071d52a5","sha1":"ad40268d30d918a984b5ef1d4bb53ae2ce5dd150","sha256":"372c2ac7e12670cc1a1a2961d46e58ade2b53e38a34da62e93f1ea5e936b8794","sha512":"9c7bd455b6c7f3fb88263af3161d439e7e45f555a57e59ea329364f84c9c08909f4f5b877589e7fc518e0c9d1e608c9cc6eca0f19f3a6ba00f18e621a63244d3","ssdeep":"384:28nmSCOnBhP6Kn2cqVcKNEXJkFN5WzH8sSjJaM:28nmaV6KnWNFN56HAaM","tlshash":"a552e195ec99de8b75a8f42da394dd930812f79768e58730f7d3c4d502060840ed9daf","first_seen":"2025-06-16T06:00:58.460625Z","last_seen":"2026-08-05T10:27:32.489899Z","times_seen":103,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/menus/footer_menu_751_tur.json","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /menus/footer_menu_751_tur.json HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470171; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 1069\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8U0BvGXtDrjgFw0UrR%2Bu0p5ZPpiUz4N76MoL3w%2BZCWAYst7w8PLRgFzxo3xrdq3Z6tareX%2FWlUmdybmJLBSse7dFGqmUasgl3puF%2B3OLF7cUKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28430ebe2f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8560,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cb7c741a547fc4a891e36f03de2f52fb","sha1":"e589086845b554f59b1b11b2b498edd0f09d2c50","sha256":"e1f2743754b756e617ee3307f8ac72f50f94263f3009f9aa90aec03edac6be73","sha512":"2d3da210a4cece77d8c2c5a21e57119c60f5010e02e3e86a8e7d3b1df68174b55f59be99ed140bf5760974abf623b8eaa24d96f0808498dffaae7723bf944482","ssdeep":"192:XSk0zkRSkukOkWkEkRSk36kphkpGkTSkEAkMlkk73kKUkwHknu4kQSkvIkWbkCOY:XvTNrLz5Rvn8xTvewIYfQQvVdqO3y/XV","tlshash":"c7024612f00d5576e7087e00bcc7ad0b84ce609dac5d49519d4d8bcecbda5af8ac62eb","first_seen":"2025-12-24T22:39:16.150949Z","last_seen":"2026-05-14T23:49:57.318125Z","times_seen":57,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":81,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index-CljhmIZP.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/index-CljhmIZP.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2407\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gij363so6wlwppn5rn6qrN27XHXP2EzQHILoj8tPd1WOq%2BC2c8HqO8HmcZXtvaToCDkw9y2M%2FxLIpRXVgn7r4bigNV70Q9layGmVkffXLILf3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28453dc12f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5948,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3085)","md5":"de7f053c8c8458c68fbd84da04865474","sha1":"d41468f4486d1846556cd63328ccf60ec9ace0bf","sha256":"bad04d408884069f2410b400ca6314cbde26893b76cd9003f1dfc96a3784a2d9","sha512":"2cb51f71d4da6263b6206c640115762643b9a9550bc2f07673bd06c814a871f56177d87531e69e0e475b7e445fb418ed63a8393171cad8adec6fd281b19b1038","ssdeep":"96:T1SCtCFVeh7FHpokS73s9lsv2InwLRiTvHUgAaQKFr0FdWpA6u6PEDdxrOq+IHWE:q+ljijHvH0FdIuSEDdxP+Vj8Eu","tlshash":"37c1a65631906530c6d204e6914f42aeee3e6638f00f5060b23f9c6e3ba1515c6a3ebd","first_seen":"2026-03-23T12:48:40.450871Z","last_seen":"2026-03-23T14:49:47.2031Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/820.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/820.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 876\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 07:47:04 GMT\r\netag: \"1d1c183f695ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:33:29 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 7262\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=rwU8KEQdaPO_J4Ed3GTRA__QBtVuVNN9BqGrk0OLZLs-1774276471.8779683-1.0.1.1-xGWtc77_UFUncb9PUTlzXBLbdP39sNLsPFSHDjfV0YogCUwynqd00IjtoI02wgsF_6VnFW6ViJX0kn5YRDmfYmBP6LJ3wLeaxBhawn6H_wHos9c4qG8GkPzqfSy40wbN; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BjD3P3mTj27wAzBifNPiV9GKhZXirrOToe08m1cXl6GqBHOqyBKbkNTAjW65iAo7jh%2F1zkeIRXRll14HlZZC5ar%2FUWZ7LP9qrvM9dvg%2BHdoFnXpdbkuHPpqum9I%3D\"}]}\r\ncf-ray: 9e0e284d38542efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":876,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"4dfe0d45775e067cd0dd4317b5be19ab","sha1":"0546d2068d78d0a9b367687f82d66a0af7393bcb","sha256":"a06439baf45e6a7d177f345de6241ec72694be1401cd7233195e9ce036ae2ef9","sha512":"f97750dbc2719af552c9ef770c0589e3127542db140454fa2c4285b4c69640d04d371f68251523fa7d3f1dba2c260623569ca9793d50f1d8ed41850be45cf4bd","ssdeep":"","tlshash":"281196267b801cd751eb35b67ab60001e197affdedc31d87d6d0c0d8560d8d28ab2ea5","first_seen":"2023-07-17T10:48:36Z","last_seen":"2026-06-25T22:10:50.311059Z","times_seen":144,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-7941cc06.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"09a6b2a4fc1400ec37c1115e6aa1670f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 383607\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e28526e1675a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53530,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53411)","md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-06-15T21:26:04.427415Z","times_seen":34009,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameListItemBetBuilderIcon-qDulsDM7.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GameListItemBetBuilderIcon-qDulsDM7.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/GameListItemStats-Bm1vNWgi.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=0; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81; twk_uuid_68a472fefcd547192dde9e22=%7B%22uuid%22%3A%221.2BjJm2Ru8bfdEmhmyI0e0lBzwrbjVlKyfuqyviT094Z0rH4XiOXJArZq36QokqXukk928ifllIjG6RUs8jGjNDnoHlrQGQxNxzhcwJRUFF3NXckwv6sIiRTkAhO%22%2C%22version%22%3A3%2C%22domain%22%3A%22galalbet1060.com%22%2C%22ts%22%3A1774276472466%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3290\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hX7WuiNPd9HxkTbZvpx0oUVZqoH5WpAof%2B7tpGTM2BzpOZzXFOK1PI6DaEpBoVoZIWBXu6eO0bzjJvb9oQU5jUlGVOpsP2mCfIA1YzP5nytPFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2854bea52f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8010,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8009)","md5":"89d8dbf1d3cc9b6566bbd0b62a5b6a6b","sha1":"77f8f433e62ba027dcbf6abb63c8f4efba7dd1ae","sha256":"65c2589783ed99926c760b9332ed75a23b11bac653fac505d751bad36f6ae21a","sha512":"73d4402e4e6cb5706895a30e39dfb73327f58f45b28e43f2585bedeb20b7bf759b6c353ef57e8141b82124c8585ef234cd46d612a263872fa76599870e806647","ssdeep":"192:gbZq46rRejxWAdQTFBzwaYbnSEhogZ1yi3VAr7e:gb44KzjwhS03Sne","tlshash":"eff1d849e424aabe953a4ca9e47e8455301e2f48e66609e1d03f0e1b073c8d5736ff9e","first_seen":"2026-03-23T12:48:40.564139Z","last_seen":"2026-03-23T14:49:47.224628Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/BetslipPossibleWinInfo-CqBcSdSY.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/BetslipPossibleWinInfo-CqBcSdSY.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/GameListItemBetBuilderIcon-qDulsDM7.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=0; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81; twk_uuid_68a472fefcd547192dde9e22=%7B%22uuid%22%3A%221.2BjJm2Ru8bfdEmhmyI0e0lBzwrbjVlKyfuqyviT094Z0rH4XiOXJArZq36QokqXukk928ifllIjG6RUs8jGjNDnoHlrQGQxNxzhcwJRUFF3NXckwv6sIiRTkAhO%22%2C%22version%22%3A3%2C%22domain%22%3A%22galalbet1060.com%22%2C%22ts%22%3A1774276472466%7D; _ga_MCEY36CK22=GS2.1.s1774276473$o1$g0$t1774276473$j60$l0$h0; _ga=GA1.1.82658653.1774276473\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 718\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mqHPpRrn8%2B9vxGs6gHsfX1C4PIm5%2FCg6dPeQ8gk1Lgo1G7Zk0funcyy9iF0hvYG3fVGVA8t1QP0lrbOfulOEgUGOsiw2Z7dTkBsz%2BDvB0koKhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28565b572f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2031,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2030)","md5":"423f29dca26db24f10e3106376608cb6","sha1":"4872000bf02d62fe47a96523e96b391bd1cddf29","sha256":"2907de9c6e00718c08c929d6287a44ca6a5413e9ddc56a1017304528fc5aafa2","sha512":"896a294262e9b04a0aea3d08da077fb7172b078221ac96c9e46d7250d3f4488409279121d4f565e46b172eb2e451c104df96d2ca7d9ccca26d4a124874c07e0c","ssdeep":"","tlshash":"87418515b444cbbdc4b20dca284d5134b02e6f50d72964a2e0fb2e385a7c99a7a01b8c","first_seen":"2026-03-23T12:48:40.502109Z","last_seen":"2026-03-23T14:49:47.243212Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1060.com/storage/medias/galabet10/content_751_f147442680a161727ec98fdc690ab9df.webp","fqdn":"icons.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:41.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_f147442680a161727ec98fdc690ab9df.webp HTTP/1.1\r\nHost: icons.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: __cf_bm=gSPSH_YPGT6wuRZJOa._zBHpOZQ7b.HI.mvY_aUVADw-1774276470-1.0.1.1-c4WanWXkKDNCzoo_AAgdxaGsAN5.OaAtOm0aRqSCoX7MuZdJUQhoOB0U3raUNHhF5sS9gZB0OgxAbemZEEi5pKXWdSJr0VsehJFxChWVLMQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 78632\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jan 2024 11:52:34 GMT\r\npriority: u=4,i=?0\r\netag: \"65969c02-13328\"\r\nexpires: Mon, 30 Mar 2026 12:47:49 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 6412\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=tIhmqSnPjxg1gmND9yqqkPnjcTpE2SxGXOTce6F.SZo-1774276481.8108263-1.0.1.1-wtf9hdK3PXTq29xyvWGyzu_lg7hbH8sodav49ip2PSs10.j6LH3i7pSMaS57aveakiYQWtXiVwZDwI5VHO6QKmSLwBsxfkVpJrM0OJtoPI5Bj3juSiVDWBD0CBAxUAv3; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:41 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1uaQ81Ie6YCJxtVdQU61BG7OXxu%2BxTTQB0ulM3j1pcdot%2BX1SXvVg4doAc5ukk4fLzOox0Z93q152tGrZGaohRF48BOCt%2BGM4HfHGW26AONTXqFV4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e288b59d7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78632,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x738, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fa7be2a34791172f3679e7c1fa2eda40","sha1":"5a779357d980afdda65b7d902969662af7854e9d","sha256":"19b845618375fbf28ed9d78764b3dc10a876969671777032402ef260b969fe5a","sha512":"614c9d4041f6e018a695cfc8c1ea525ca5878307876b5cf61f663f5bfbe4ef83cd141353196a25c35a771d1487d3955e6101cde6e7f4d4be38bd02e70b2ed6bd","ssdeep":"1536:7aPHGioBrqIL0sOnDybTV4zB2x8zH0bKDMNmy5vcqZbZWjl/ICIRZ3t4:uOi+OnubTkhzUbKo0sZbalQCS+","tlshash":"80730246a5541115eb5c46e86833e02ba7bb7453cb0270cd93076abe7aec4ff2b4c647","first_seen":"2026-02-24T14:18:16.733481Z","last_seen":"2026-06-03T04:20:31.910264Z","times_seen":7,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 6412\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\ncontent-encoding: br\r\ncf-ray: 9e0e283bedec6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-17T09:23:28.231955Z","times_seen":93667,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/withPanelButton-CJW4F-kD.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/withPanelButton-CJW4F-kD.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 512\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P2GIGlCkf980KmTUxQ3j0cQQq2hnk%2FcKwp7sbg66w62Pw7eA%2BCTyCwEc%2Bt3oIBVsLs%2BoMij4zSoXLnaIiljRQVNHOAIfJsWPj554dkSxbnCqXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28453d992f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1089,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1088)","md5":"d7fda45402c809846f53d8d334af72f7","sha1":"42e20b26d0d4117e8548b3160aed53eb52a29246","sha256":"19777d1ca6f766959fc0d413358f0dbc1ce971dcaddd42093b8069edb9c58aaf","sha512":"6af604fe6a4de7d9c95dbc7c854efc1a748ef2c0bb058f9d2c6ce8a062eb648bef0af04cdc6b66955afa70c4960c1bd0f753b0e9402fb7f4977a623e242f17b2","ssdeep":"","tlshash":"ae11f0f4f584a9b2e4c410c8577b2cb2319e32cadce1049021a6c8e91fe8449961e9aa","first_seen":"2026-03-23T12:48:40.462683Z","last_seen":"2026-03-23T14:49:47.319293Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/DataspotTracking-BwPyciEj.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/DataspotTracking-BwPyciEj.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2292\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2dAynO%2Fi1yO9tPTWHLdDUEVhVszMmgd1Y3b4Csyi1ldm2FcdDWG0HgCStIDYFSd86SCyXhDhIMC7xCvSLtq9zKulEpgUD403dzvs%2FUz9a1LncA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28453daa2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7034,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7033)","md5":"df8874cd1808095ad8d3c8a950d72086","sha1":"7fd997c670d4e0b4fc9624a59f5304641c86f3f0","sha256":"680665a2e420eafb88c85181f4c48ba09bce81a037536d572d5e1804e6458b03","sha512":"9af6fdd751cf45864e45f744f12654f7b9598eedd6d2b7228cd6c0b7b82c45f927e31ae874640f06ef43c23e1bf4bd19e49ca5fe369552ba60ee49692dad2b9a","ssdeep":"192:bw4ItlJYl7Mpqk0bj0JMKb0xdsnBdOSFPb+fGCg:04IXJYl7PIZVFT++Cg","tlshash":"14e12245781d78bca073d6ac0d4752a118287441e6329de076a6cf5a9e38cc28bf37db","first_seen":"2026-03-23T12:48:40.36562Z","last_seen":"2026-03-23T14:49:47.201964Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/AppSettingsButton-BNMcbAMQ.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/AppSettingsButton-BNMcbAMQ.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470575; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 260\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=04%2Bflpy3B%2Fq791jWlxXR%2B1m5HdyYgmybtsTbEAwDeB1c36CsMgNOuG%2FAhoOrVUYIP1dy6KhFRqMfkPaqs%2B5SFU9Ng%2FMMCPlRhnuHxkMeqxQFJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28455e352f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":385,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (384)","md5":"10efddc616a357680413a7c3f1d1574a","sha1":"684c4466c147b9f78f610a76844fa85c98bb5f57","sha256":"91cb8d17acc6d4ca2d6a1c8b4985e9f2b6e9b6fbca59fb20869bf1cdd0536fff","sha512":"5d5b25b0cc52f27b48bacf62d852a841e9b09d59dfbf091bd88897004d1a9ccd36b008cec88141f63e598b62434d0e6326b5620b8005536c03279ad311e65de9","ssdeep":"","tlshash":"7fe0c0c791d6d2fb03e12be1c61bc1053e1a7c38c349950140bd74617af4186c15f66b","first_seen":"2026-03-23T12:48:40.541086Z","last_seen":"2026-03-23T14:49:47.25734Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d0d2b7c.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"ecc9e5cf090bf5602a01763e2895acad\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 295821\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e28520df775a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10938), with no line terminators","md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-06-15T21:26:04.407385Z","times_seen":26443,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/341/682264.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/341/682264.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Jun 2022 10:55:59 GMT\r\netag: \"62b98cbf-9a3\"\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=.ZOBjvd13Ut6URL0uYt2IyGyo5eO5u0aGX76gXmoheI-1774276472.9687433-1.0.1.1-ldeEPGvEe7PI5Ivx_aOdbdN4DLBBS6_VAhwarpK5tKBx_EAmlYHd4Oo6xvf4a1OeF26lef.s.Yn.CwPLe02sspLPoqmurq5HrsfNtiVXanhZJ7IzOE2kB3DEEyLNC0W7; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fdKnmIzen%2FdrLvwB5hG%2F4CRE4Z2DMGylY2LvTB5azqXG2jfJbLcRDTSO6%2FcclFCWRgC%2Ba5vkQhPpcKeY7Yk%2FPW5kWvkOey6WXpcw1mZPjdqlZmtDnFxCG9YoJOE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28540a060883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"87af8083716421c45adf7b89c550fd95","sha1":"2eede979dce324b9cd8c9e45a4f1d89e27c74716","sha256":"a748f909eba7de62cc2b5325d56fd19af99dde087b3e64d9b759771f9667a356","sha512":"d28a590f64e63a3c78c08af9e4a0ea4655978ac7d5f327c10664f2bbec15013c80b735f97abe45164945e1d95a9a611dc3cd71ff084450c4c554ec3f72e81d07","ssdeep":"","tlshash":"47512c2db451c5b1b0ad894534db503397230cc5eddca7a5ec4e642a0d2ccd9609dbcb","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-08-10T09:12:16.484033Z","times_seen":221,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/header.json?v=01/08/2026-09:00","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /header.json?v=01/08/2026-09:00 HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/tr/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470271; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 142\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NOSvyy79uS5Cbcf74flP2nU1M1gjZSIgmXTndz7%2Bu%2BSgkVC0tbQlot3HgONswRm1EopCVAFe%2F6dUxnDHn%2BPpD6WZntYnGEDHjqSyS0Lr2lPzQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28442a0c2f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":225,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4fbc119c5c8514e3587fdfa01f205866","sha1":"a396d7f127ee203b471f1a7e507184318e74163d","sha256":"10279aa2fbd66a0c0140d4b4cf9a39b0c9bd14b18bb35f1bd6eb26eab355b9d9","sha512":"9eef97111b2474b705b496860ecd29c7c591ddcb79887d755e5ea7bcf2d578a68bbecdc54ce4f11954f679ff2b8b5cf060da8cd4287a78a1fc3a92fdfc6125b7","ssdeep":"","tlshash":"cdd0a73aec10da7073a0c413c18067801140e514d644485c9cddea5a93dd7891180b67","first_seen":"2025-12-24T22:39:16.192168Z","last_seen":"2026-07-16T16:07:12.950479Z","times_seen":80,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/fonts/default/RobotoBold.woff2?v=22","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /fonts/default/RobotoBold.woff2?v=22 HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index.ByCopC5T.css\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471318; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 62032\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:38 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6413\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L9z0doK8HZS6WEnUqkhpmRORPasLEiWDse9qfA7KxtMhmUwSjqRn5vk1OoXK9aDFjNM4xL6ydIbeE89g5qStPGqYAJ7TfyLzOiUutJ9etTu6fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284a6d882f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":62032,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62032, version 1.0","md5":"5c3f2196f147bbbc3583de1008be7538","sha1":"b1d65e305e850cdd352734f7842cddfd30f08d0b","sha256":"c6213e789895a427306e62a03b1a96ac884f58957b4f14e27f8e4361e32bf382","sha512":"a0a556d7d670c7197f1daf9cc7d84b3872cbaa92f916bd092c3831d3936362ddde3e837e4330895a5d53f0783b761ded7d00d126a0a04feaea84d01d12e62f1d","ssdeep":"1536:+07i808sgDXsqfywKCgqTwnXO09CU+O2G48I5lkEGN2iBYF5cftfplD+2U:+epsGXZfeCgZXd9hAGtI56ZiF523+2U","tlshash":"2f53023e9427274226b1dcca96ece2ee16c278fb700119ddb41075ee9f32f814c83a56","first_seen":"2023-05-07T18:24:32Z","last_seen":"2026-08-15T11:25:22.013143Z","times_seen":2674,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/BetslipPossibleWinInfo-CqBcSdSY.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/BetslipPossibleWinInfo-CqBcSdSY.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 718\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6411\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q4FtS2xwNOC9twWUPbXHt%2BKVq31l2FDXCpKi6Nf9js%2BemG36JylnxWVSOaITlaalCf8HRe8z0Q1y2u2LRUKYvVfpx3e5neJhcwE7aTVwa%2FF0Hg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28516cf62f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2031,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2030)","md5":"423f29dca26db24f10e3106376608cb6","sha1":"4872000bf02d62fe47a96523e96b391bd1cddf29","sha256":"2907de9c6e00718c08c929d6287a44ca6a5413e9ddc56a1017304528fc5aafa2","sha512":"896a294262e9b04a0aea3d08da077fb7172b078221ac96c9e46d7250d3f4488409279121d4f565e46b172eb2e451c104df96d2ca7d9ccca26d4a124874c07e0c","ssdeep":"","tlshash":"87418515b444cbbdc4b20dca284d5134b02e6f50d72964a2e0fb2e385a7c99a7a01b8c","first_seen":"2026-03-23T12:48:40.502109Z","last_seen":"2026-03-23T14:49:47.243212Z","times_seen":3,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GroupHeaderDark-C4imcPRu.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GroupHeaderDark-C4imcPRu.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/GameListItemBetBuilderIcon-qDulsDM7.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=0; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81; twk_uuid_68a472fefcd547192dde9e22=%7B%22uuid%22%3A%221.2BjJm2Ru8bfdEmhmyI0e0lBzwrbjVlKyfuqyviT094Z0rH4XiOXJArZq36QokqXukk928ifllIjG6RUs8jGjNDnoHlrQGQxNxzhcwJRUFF3NXckwv6sIiRTkAhO%22%2C%22version%22%3A3%2C%22domain%22%3A%22galalbet1060.com%22%2C%22ts%22%3A1774276472466%7D; _ga_MCEY36CK22=GS2.1.s1774276473$o1$g0$t1774276473$j60$l0$h0; _ga=GA1.1.82658653.1774276473\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 517\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K1xDKBqLcedUsn8ryhsJJPqfbwEZzYH%2Ff5WT0aoUSszjZfDBzA3dNLRtgxppZ0WsZbJU1FZ1Cdyp7zD7bkpLGQhHoPhM5xe8SEw44sra9o53EA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28564b402f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1075,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1074)","md5":"31d5bde46c82fb9e1b1426b023f46bdc","sha1":"26ef66e5347555a9c100905c1f923f47bc6b16e9","sha256":"ebcd22f24e5ac863b234ceffa5c246069d0b1b824f05dd2257e9f9982db1c8f5","sha512":"960bca447decde377fbaa10bc7fc3f86fa0d197993d5d0426f7be84f26f71c514d9ef7d127bb0a72048aac2686117da1672df590a10f3160b45b9cc5903bc259","ssdeep":"","tlshash":"ca111611e424f7a9c42785c2dd6e0015757d0fa8de190551d07e56336a7864d3a0ffed","first_seen":"2026-03-23T12:48:40.337207Z","last_seen":"2026-03-23T14:49:47.302112Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/QvLuXwupqtKCyjBw2xIzFLIf/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9tLmdhbGFsYmV0MTA2MC5jb206NDQz\u0026hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=eqr15pe79bc","date":"2026-03-23T14:34:33.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/releases/QvLuXwupqtKCyjBw2xIzFLIf/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 366969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Mar 2026 13:32:09 GMT\r\nexpires: Tue, 23 Mar 2027 13:32:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 02 Mar 2026 05:02:40 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 3744\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":863710,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"acb7d4a922d9a5a1337aa1a24004e1e5","sha1":"9acc0b5a3519c24e1ce224563d475d5a744ec4f2","sha256":"95abb266a8ef0207ba8032e78ee565442c8a7998b9ce06dd72ae5efd77c54798","sha512":"d065a75987917ed45d3235ec749d25f797038d701c93970387a7e77f599fb936dacefdbad9af50e39436f9bd78b08fcfed405c5915ea1c6cdd8f699269dc64e7","ssdeep":"12288:oGRVW37Ok82oIqOHTTQueAQ4CpSen5fIcH6et7YIOl2:rgOksIqOzyAQ4CT5fFH3","tlshash":"4a053ad8f0c675b95332b4f52477100a637d891ac95c085eb2b885f13ab3d4960bbebb","first_seen":"2026-03-06T17:56:23.511704Z","last_seen":"2026-06-17T18:21:50.595333Z","times_seen":8661,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.201.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9tLmdhbGFsYmV0MTA2MC5jb206NDQz\u0026hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=eqr15pe79bc","date":"2026-03-23T14:34:34.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.recaptcha.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.recaptcha.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 19:26:18 GMT\r\nexpires: Thu, 18 Mar 2027 19:26:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 414496\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-17T09:39:38.063267Z","times_seen":967612,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":38,"dns":1,"connect":8,"send":0,"wait":9,"receive":8,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/payments.json?v=01/08/2026-09:00","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /payments.json?v=01/08/2026-09:00 HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276469445; twk_idm_key=Ax1tIpkueYdP8a6wWFjic\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: application/json\r\ncontent-length: 4414\r\nlast-modified: Fri, 20 Mar 2026 22:52:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T4JVV3jJRV33MF5iAZngKUyIyWuL5NqB7vckaerTmCYzUPF7J8gqoptJkU8ohwfzPTRKVjYZWgN5HN0Y11tg5%2FYX6GxMTNzpxexpC7ENsGd9eA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e283e4fa22f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":48591,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c39ca170d36760975d1dfdaf32ae1dce","sha1":"ac5b5e53fab808a31dc51d55db62c766cfda2487","sha256":"522a815e0326d74240e5835c3461cf09ff0d979c2a31996cfdea34a8456d8ae8","sha512":"3cff66a1f604112667fad096da9db86794e936c23613fcaf783037d919c162d5b712b6ebbd06a994ab0ec79b0dfe11f0dd61cda68b890ab5c9a5f6a46866630b","ssdeep":"384:W8bKY44KDJJOTo6DVgxOOxJzjXvOYB3k9OwxJ0+cnvCVJJvsf6OIXuOl5OcmFhjL:u9XrkU+3vs6IfL/8lyr","tlshash":"0a2320e0640f05fb1dc1f2c03aba9a1773a197468328f98fd3998c355bced22ad85675","first_seen":"2026-03-23T12:48:40.603522Z","last_seen":"2026-03-23T14:49:47.283001Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameSuggestedEventsWidget-BEY5dQnO.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GameSuggestedEventsWidget-BEY5dQnO.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1701\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CE73WXxxVqlEPIn6SnCm61apdRBFT2c2rx3%2B8TLyKX7VpTJhXQ%2BU8BMMrsjKejMh9mxAzkvy%2BlZmzsN0sLlgPSuxBzdy9oX8vRwOpnvtkyEr4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28453db52f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3726,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3725)","md5":"7345bbac091298f9e04a68c920846d30","sha1":"631bc084ff5ed3cf5771f38595bf4f0b89d1407d","sha256":"724cda46a4ecd30ae32f11cd4e6f3c0fcd3f2b5fbbc5bce5437de267a32f2b69","sha512":"aeebffceb93928dd362c7378214166d6bdd21f3fdbf3c6831d9c605ad11da45da39b8a9d28828db260586a8127f2fc802cdf73080a4e010e0bb91797152dfffb","ssdeep":"","tlshash":"e371d74ad010aa39a16345e81bdf3219103672b4b54353c1b63fca3127e5592ab5fbdf","first_seen":"2026-03-23T12:48:40.482802Z","last_seen":"2026-03-23T14:49:47.314658Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/InformativeWidget-CTNuPyrc.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/InformativeWidget-CTNuPyrc.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 570\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=of92Hr9Gx3iDnJMg4s%2FSpdD6m5INmnZlcB9pGnlrF8Hge8zFRWE52fALOyDhE0sNhUb0cBoYLPmp7KnUxiyYmym998gq8FX4jUMAFRrul5mOEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28470aef2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1021,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1020)","md5":"9f8c7740c95695c15fc163b6ce90fc0d","sha1":"369b1bbc5cb604484f9bc711d2e0b33a84a5fe62","sha256":"91ff9c46723bfdc16f53b4c7b8dd15a82613474071904a37a3a47641b2d4737d","sha512":"f54194bff15e5f8340526c84b7ec90fb347a426fdebcc4b85b7e8b967818376b0ae2159ecc42416a6fe33954a28d4d5965b1e0d0e01891ef07ffeeb1913d81be","ssdeep":"","tlshash":"64116581e695d63ef03604cc4716505465226ed8df38d8fd48773008d4b4d0ebaeafad","first_seen":"2026-03-23T12:48:40.543722Z","last_seen":"2026-03-23T14:49:47.213055Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/v1/projects/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/settings","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.164.239.145","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:38.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segment.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 16 Sep 2025 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:3F:7C:B8:04:2E:CD:A4:E1:F1:8C:5D:DB:17:18:85:E6:C0:E9:98","sha256":"18:9C:5C:43:17:4C:C1:EA:72:5A:8E:DD:37:64:4C:DF:83:99:F4:51:8E:85:20:61:7F:A0:40:01:DC:6F:65:43"}}},"request":{"raw":"GET /v1/projects/lilPWXhBdHIJK2XkMZqV7SFa8UZQZd0D/settings HTTP/1.1\r\nHost: cdn.segment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 740\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 11 Mar 2026 12:57:50 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: yfbKbHax_b7IMEA1WXjd47PBRdK3ZaCC\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 23 Mar 2026 14:33:06 GMT\r\ncache-control: public, max-age=120\r\netag: \"183e77df6417b705a7c0881bc6eed4ce\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ec47ad650ce8b90cf8852923bd4f4320.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: cMxttrf4jcD00yiC6BGoSoS9csfnZ3qL5ZGonFlcfq-_WF0r0sDmow==\r\nage: 92\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":740,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"183e77df6417b705a7c0881bc6eed4ce","sha1":"d3ddf81f8b2d425f75fbb248ae561cd60032c28a","sha256":"caf3577f1a9c90c6793784c2e72dde2cac1cb1ae6e454cd01af808ae90b1bbbd","sha512":"b082c0c9f92685517414ab95bd281be3dfd20a6e2e2ddfb48950906dc417c08d2b3321cc5b1029f1973aff44e4bfb87686739ce16860a640f8e0a3dd104382d7","ssdeep":"","tlshash":"eb01c0cc3410b1b78d4ecb23c9193d037ef58879188a653454be5b4c00ba9ad039ada7","first_seen":"2026-03-21T17:26:39.639761Z","last_seen":"2026-04-11T18:43:32.371083Z","times_seen":21,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":24,"dns":1,"connect":8,"send":0,"wait":10,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/ButtonWithAction-BLYSmFxL.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/ButtonWithAction-BLYSmFxL.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470575; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 192\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TzwFfgBKPjcDpoV1g5OhXBrm6Lld5WWufR5WYg4DE3%2BXW9sbrUO2SeGITdMQEou21RJicl2F0J0%2FuwO%2FoRme4MO10Gqe%2FHayVVDlzMR5yKBvoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28456e412f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":267,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"2e9c1bbfc27a80927619a931fc4a71e9","sha1":"063b2f6681cad181f0afeb2d1418c0a903b51849","sha256":"eb7b34068e48ca7e28588cd4be978838a758db62c428a1823f2e0db1260bc52b","sha512":"99a154cbd0b8e3c46482970acd076a872e1acf06f638c1dff0facc7f13a787035b59219f9762d03ad83e7917735613eb63c4b368f59e6693e1d24bf050c7b3a2","ssdeep":"","tlshash":"08d0954b5495d5f603d276f0a327c0112e196d64f7988541804d34503a7195ec53fa3b","first_seen":"2026-03-23T12:48:40.309467Z","last_seen":"2026-03-23T14:49:47.233145Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/0/800.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/0/800.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 4951\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 09:02:17 GMT\r\netag: \"2df5cac0735ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:47:40 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=j_hfQG_MRhSWC0ZhbtQTPsGdnyJBCoW.jd.YXyrmH8U-1774276472.537617-1.0.1.1-IElYQTmkmaeLpAAImiGVA.wmT2Ot.Q1Izt_cdRB1UE_Rl0sHbq.1Vs6bOQdNMrZlLc9xYlqfwC2gjQRcIoBzJlFnULMVgrBzeDiHCmgc1TU.VWiZEiVhuhc01nzKZm4r; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BgI6WeWvfB0ULTWcM6TiFdL7%2FHiFbn27FLlQTGX3fHcdbXktpiT5NDSUhh25ZyW9EisQvUe0eJGzKLc5T6RAeYl9%2BW1kQjYKOwLNM4kMauxWYoo%2F%2F9SQ1i97D1Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28514a5a0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":4951,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"9da87dc82d89a75422e4a00672392f64","sha1":"f6b9bfcdf3b6767e16499b4c94301f0e6850b4e9","sha256":"5c85e7723af93363b607d5651366460c8e9cddac678f01b3b42be8c5044cca9c","sha512":"695f460aea1162beaf3529e20c0d38ac455cabb10321beeab473f2adfca0041c848f26ff6a96ee5bf984231850fa63a8e06d86bce3d74f3b035d9e01a7225ed4","ssdeep":"96:e/n9pM/6hxTJRNwG0CaT918udXOBgyWoVa6ljHbqxLqZ9ltV9I3rwNY27:e/9s6BFaJ1bdX18XlCLqZn9IaY27","tlshash":"4da14cbe9eda40555a88fc0c76cea1539297ba5f8cad3147328c9114f170289e7c7f06","first_seen":"2025-11-12T09:11:41.218665Z","last_seen":"2026-05-27T23:57:50.621457Z","times_seen":7,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/470/941090.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/470/941090.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Jun 2022 10:55:59 GMT\r\netag: \"62b98cbf-9a3\"\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=cj0TMBz8MRr0ByBYo94CzV.RlEuFSh9rNjUoeUZQBaI-1774276472.9815094-1.0.1.1-OsbwERYtoXg4Xq88Cux.WRk_S7514IXMQVCtBQ9dbr3F_kkeWFbRHTQl8sruaqnDVLxM.GMbtLUV7M1ZrfHHs9EDC0d5jVryb9twbYQNQpWTqfRc0_e3YCmExCKNAcxl; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=54aWm%2B8dGX0d%2FzYQd04hPOK7aRwWPbxKhWVdEwFn40jI3i6cCoJh4zekQJkgDpZDXHSmuAEd0yx0N1cD84pPSqR2BxJYgiopwvLWO0%2B5Z%2BE8JECBKFiQTXL8ZEI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28541ab10883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"87af8083716421c45adf7b89c550fd95","sha1":"2eede979dce324b9cd8c9e45a4f1d89e27c74716","sha256":"a748f909eba7de62cc2b5325d56fd19af99dde087b3e64d9b759771f9667a356","sha512":"d28a590f64e63a3c78c08af9e4a0ea4655978ac7d5f327c10664f2bbec15013c80b735f97abe45164945e1d95a9a611dc3cd71ff084450c4c554ec3f72e81d07","ssdeep":"","tlshash":"47512c2db451c5b1b0ad894534db503397230cc5eddca7a5ec4e642a0d2ccd9609dbcb","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-08-10T09:12:16.484033Z","times_seen":221,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1060.com/storage/medias/galabet10/content_751_d7d56d1e127adb062ec5db3522b0b87e.webp","fqdn":"icons.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:36.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_d7d56d1e127adb062ec5db3522b0b87e.webp HTTP/1.1\r\nHost: icons.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: __cf_bm=gSPSH_YPGT6wuRZJOa._zBHpOZQ7b.HI.mvY_aUVADw-1774276470-1.0.1.1-c4WanWXkKDNCzoo_AAgdxaGsAN5.OaAtOm0aRqSCoX7MuZdJUQhoOB0U3raUNHhF5sS9gZB0OgxAbemZEEi5pKXWdSJr0VsehJFxChWVLMQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 136210\r\nserver: cloudflare\r\nlast-modified: Mon, 12 Jan 2026 11:40:57 GMT\r\npriority: u=4,i=?0\r\netag: \"6964ddc9-21412\"\r\nexpires: Mon, 30 Mar 2026 12:47:44 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 6412\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=e7oplM0PnabP_lyFxU6GIgvGXNxJvVsMB2380eYbjII-1774276476.4985137-1.0.1.1-8RDw8bcv6x3mR1zSKNL0Wn1j89k2HiBRVwAsCfCAKEeM0oh1_KubzoHOSGD6xpESQjCd1YcG1gSt3nkIEN.omN2ifAPQtDkPKh8kOBSK143jRSNjBWx7NNcB7AaFvqVF; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iy%2F%2B%2BkxNGZjBKNgdqhDFHlxOJYBZyIb40WVXiwyThUVuH0qI60tnIlMRt69e6gNcLAi9Wv0H36zUR8KGCEVtaFpo7KnvTciKW2oqzru7rTcUx%2BnyFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e286a1f72b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":136210,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x738, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d1b84004cbc194854326ec85ee06224f","sha1":"970ff597070582d73bf602e1151adfc5ff21773b","sha256":"4fed0fdf6f538c9b3ad6d876e3fcf432314fe7eb625abd0572fe8de92e10bab2","sha512":"123a24024a2e001cd3370d6d8263ff6e903d88dc28ab9abe63846f0c2c4f1dc11f3d65d30c804d4b991268b136c5ffd51c6676b7ed8206ab385b05c74904c96b","ssdeep":"3072:bnD4nF8611RChbZMjA7vrvpeYSxVhMoY/l:o11eQsrvpNepo","tlshash":"99d31273b1ac5aff433ec1d09dbb9342d073632b7609e1257994952895ccbaaee14243","first_seen":"2026-03-23T12:48:40.535744Z","last_seen":"2026-03-23T14:49:47.317336Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"events.eu1.segmentapis.com/v1/p","fqdn":"events.eu1.segmentapis.com","domain":"segmentapis.com","tld":"com"},"ip":{"addr":"54.72.127.119","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:38.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"events.eu1.segmentapis.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Sun, 07 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6E:BE:8C:EC:AA:F0:8A:50:90:0A:E6:C9:91:BD:26:DE:D2:1F:39:C7","sha256":"F9:2D:36:7B:E1:0F:B9:06:71:4E:07:2E:BF:99:BD:75:4E:49:9F:E6:06:C2:E7:98:EB:1F:A5:83:10:CB:27:41"}}},"request":{"raw":"POST /v1/p HTTP/1.1\r\nHost: events.eu1.segmentapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nContent-Type: text/plain\r\nContent-Length: 848\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:38 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\naccess-control-allow-origin: https://m.galalbet1060.com\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"90749a50019a27e1f32cebdbaa7a1bc1","sha1":"8329e3339f928f8591024bb0f938dab99c0ad4b8","sha256":"12f71cb993958eefc4bdb41d7dbbda490779a9c7aba448f7be52bb63912e0254","sha512":"b3959e671f729eda8aba59886df18c60ed5a768a3357dc09b29069b0da9c9fad7073d0072dc47f3ecfdc945351fe82ad3b653dd5d79d01096e5ae8bb42af2bcc","ssdeep":"","tlshash":"b8700022000000b200a0b0020028a802a8a08c0880820028c00a000a8a022802082008","first_seen":"2023-04-06T01:58:03Z","last_seen":"2026-08-17T08:11:42.734384Z","times_seen":7448,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":141,"dns":1,"connect":37,"send":0,"wait":38,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png","fqdn":"02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org","domain":"anjcdn.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://galabet.winwingames.io/","date":"2026-03-23T14:34:31.182Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1\r\nHost: 02503637-3458-4264-a556-a663e82c28cb.snippet.anjcdn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://galabet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T09:43:02.208337Z","times_seen":17933663,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":1,"connect":10,"send":0,"wait":0,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/FavoriteGamesContent-BzXk7Hhx.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/FavoriteGamesContent-BzXk7Hhx.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471760; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1186\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2Bs9sKm4PMXQcjaH7V0T%2BwTLBYiJBDe5BKtcWFR6fR5uQRQGoeV4C6Sgoc2suxtvp7jFCv1FcXBsMK2cCKkqTbODbRXwNMvTtb8dMtbdyeTkaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284d881c2f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2827,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1710)","md5":"a582630872ed88d3cf73be82a19f038a","sha1":"0bb2e1f0b100fb13810a3a10423f52c8cda65e14","sha256":"25b782407db9df7c35563b63090d18f6f87298521f6ab1fcc6567fdf09db7cb3","sha512":"02b7946bd368ac44e97421d7e722ca08eb3eab1b343440db3cf713e890ff83e7632522c09efb7754a77e5dfe4b8dca0a0d11e72268e086600647ac5a4553bcfb","ssdeep":"","tlshash":"8851751100819fecbbadaed92e2ad0a448aa074d6146d17cad794f7e30189407137ff9","first_seen":"2026-03-23T12:48:40.423352Z","last_seen":"2026-03-23T14:49:47.210469Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d0c8092.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"77424425bd755d02077922d40a96c207\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 304666\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e28527e1875a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5261,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5261), with no line terminators","md5":"77424425bd755d02077922d40a96c207","sha1":"9702eba70ac4506031d55a8c9cf6732a66853b2b","sha256":"1128f463d0038310bb65c71ee2bd50f52e40dd9dfc0489e127f3912a1aa728ce","sha512":"2ac723d6ab08dc1cf45141cc44966d9b0f01c892511f40148d785de61ac084e014799555bb3b574f6f8b78e9410df8c112fd437eafe0aa747babdc52b451d1a7","ssdeep":"96:zNC9Hqt7pEma7hY/rcKaJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYcLRIvgx43nVY","tlshash":"13b1859ef247b456c156225150ef3b1df33a281ca61ccdc8a66565f218784cba077b39","first_seen":"2026-02-19T03:13:10.646706Z","last_seen":"2026-06-15T21:26:04.407976Z","times_seen":8491,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/88/177595.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/88/177595.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 9473\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Apr 2018 06:02:15 GMT\r\netag: \"b9527af7a3d7d31:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 14:33:48 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=MHWuoSLbCTpudBfBkqH9B1jSYlcJGDpJ.WaxtMyR1CE-1774276472.947228-1.0.1.1-O0ukn0ESNzWH_Xp.G1mjXLNZH1lz5ImvfWN1FLsR_kcVL7fz.i8f7ddXblDrAig1AsEiMaBackt3tXXwVCVXpFKArDgFxV8O.OUy0WsPIuiKdcdMO.17MSocFpREZYaK; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RAkRy%2BtE6zgqgkpgxuPeydN%2BuIMbwlpHX26v5MusdLTo26hcVo4luzeJFFBPGlj418qTpfBpjI9gWGqMoiEQg6N32qTndsUqRh12ZUmjPH2PxPQ9S8vRr%2BQS33U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2853e92b0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":9473,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"3af7c444f9bc96bf6d3fd65013347a0c","sha1":"ff69a0daae7dcc6c6b1ea12e145169b15447e086","sha256":"dcb92cf72ee9fbbd538bcb350f4f85d5b055bda497b116c7a2ee28ec60b59899","sha512":"55952f8a94ed018bc2624fdf7235358fc103f747fb656c153fd5986fa6ffe1541d4ee4834c4c1981c587003bf476ef00ddeab1f293d912952c6a3f3887c7881f","ssdeep":"192:MfJN2ylyBfoVjxZ34zILie6JblL+WgkBnTQR6OkRKag5q:UN25+A5fblqYBo6Ohagc","tlshash":"5812be86a67295b662bf22ac1d640a7fc3b3815f0e7a8b5a3c61802323d44d4e4b1f46","first_seen":"2026-03-23T14:35:26.230724Z","last_seen":"2026-03-23T14:49:47.204767Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:29.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.galalbet1060.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"b057293b718ae7060a9acc593ff83f67\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 6412\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e283bedf26e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":324696,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-06-15T21:26:04.431869Z","times_seen":12669,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index-Cq3w_vEM.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/index-Cq3w_vEM.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 469533\r\nlast-modified: Sat, 21 Mar 2026 02:02:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6414\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1whxIr3rkzEKNW9Mpmfn8SJhD5p96HsPam9iiT6NnrPEnmbO9u8b%2F41MJ70Wf9Ysp6ZWXmCC9JqK3xCCChACmOKHPBEOi%2FnJJc%2BgtF9BfTPnNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2842ee552f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1941052,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1081)","md5":"fd54c7be20e561dd2594e7c02109ec87","sha1":"3b3522f7714b6bd0c12ee122ee87de422f363a00","sha256":"89314578d9541defe6cf12b1e7582c6c973e369b421b4210dc4ad13b1d8424aa","sha512":"b317c7a61468c3ba119eb27bc036d1d37c009a3feb8cd8c8e5e42534de0b1472e93d494ed9cdca8a73a95fdaabd779bac690f0df94cd066bee1c7b87dbf6ecf3","ssdeep":"12288:vWixetVV3z6ElJFQQr/exDxhsb2Ll3TjP80h:+tVV3zdlJFQQr/eTh1l3PP80h","tlshash":"ed25b34aa6f628319223f1791e2fd4053a25890b1d88fc583b9c96545f4c83e93f6fed","first_seen":"2026-03-23T12:48:40.339428Z","last_seen":"2026-03-23T14:49:47.229218Z","times_seen":3,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/LiveChatAdviser-DRHwJ7xf.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/LiveChatAdviser-DRHwJ7xf.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470575; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 463\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vtOkk3Ui3zdfmSugaKRK0ZAPDubS5JfPY8HiImK9xtRvMM15r%2F6vLmWljrJCLsQ5%2Fz%2F8hKwvWMMktTgR8uEiDc1LcDAk7SONzZPX%2FVOrCatG5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28456e3f2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":862,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (861)","md5":"7a1a971f5b00776cb6ff206810e32187","sha1":"75d578592961f4af63a58d575583c14ca11d524e","sha256":"d5d63d0a3f4b910753bc8e6f05608bec03288e4cb39caf2adfef1c80281d1806","sha512":"9f3998beceff8099a1ecc66b406836af08610d74da931fab1a3eda243be5b34e4d07e13f05089f84d9bbcbefd60e3e13dd29b3e03eac5d36347b24e730422c0c","ssdeep":"","tlshash":"a21112e5f0c6e3fe6767288dd76a2043700a4fa5c12d0db5807b19645a6ce1aa30eed4","first_seen":"2026-03-23T12:48:40.385284Z","last_seen":"2026-03-23T14:49:47.306233Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/MarketSlider.DEf_J3O6.css","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/MarketSlider.DEf_J3O6.css HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/tr/\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470775; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 565\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:38 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8iCxwSOLcra08kZPIdxePnxdX9PVuhLWkcc34%2BBvv3CXUYZamwsh8OAM2JGTmDqmToXMVQBJPz375U3K%2BaDgkJMMQ%2FkZIQUUa3vB1ZfkQ9wGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28470ac62f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1833,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1832)","md5":"ef343f8c175866bb7bb368a1bf123a73","sha1":"e1c0533eb620915a2c4c40e107f70d5baf9d6389","sha256":"6d099492d0c2c9b56be2306ce327a593012ee443628458abe71202072d71b172","sha512":"82cd49f1b4f6e25c1af4748350e06b08d99555d4eaf4860a5c6d28add968d1a39aa76b2cd82767771330c04613fcbe90e97d8825b536c10b4761487b5ede253a","ssdeep":"","tlshash":"303148926406203cf976e25df6baef9df08a1233bcf5d777d9151239c4852a42031da9","first_seen":"2026-02-22T15:27:55.529294Z","last_seen":"2026-08-03T05:58:17.576688Z","times_seen":132,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/JackpotPoolsWidgetContainer-GF_Y9WrY.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer-GF_Y9WrY.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2589\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GkCu3PCOzKfmExDrvlQdgEOg2X7e%2B%2F3ECmNCL2XEyADMJy5GWwwnGUuSOCAWUvHb%2Fq2JQ04tg%2BggW%2FOFMjkWF83NkuqC4Xkzr0CZmJSPYFeGcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28470af12f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8121,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8120)","md5":"64c6590df221a20c1d966b70118f4346","sha1":"761b37cef4c23eb2e8dcc3d37422d135c128574f","sha256":"39103e32497aad940193356b77f09e7cdf5cb3b57dd6a770be3272c17fc26057","sha512":"5427c32c4f3da7c2104278c5420cb2c151b08b4c18fcdd26c11625a73167e409d874801dd724bbb9c4d34fa0704bea201b6528259167e26f477eb9a551496ac7","ssdeep":"96:VTSM7oF950GU0iXfLTeWIt+GrqOGtJTQzrexg3tSHWFeZ69OAF++TZSejMM2VQ0O:lSM7eU0o2r2Oecf6OtbewcA/TZSjSN","tlshash":"a5f11108e456b7bcece94893597f503c365f0ba9d7a504e4d0bc99344e6c88fb605b8e","first_seen":"2026-03-23T12:48:40.390524Z","last_seen":"2026-03-23T14:49:47.238945Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/fonts/default/Roboto.woff2?v=22","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:28.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /fonts/default/Roboto.woff2?v=22 HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index.ByCopC5T.css\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64248\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:35 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Uj5G4BvsxYJueGVQ0DvU%2FH9Oy0X7LVGMZa%2FthgmuO5347eyUgiccNokRygLgNm%2Bg6vXwHW98XfoKAoW3mQXjA6Tpjsa9zkH3OdBAYB94l%2Fwrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e283a5b462f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":64248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64248, version 2.0","md5":"b65b078c2f62cb030e8faa332896afec","sha1":"d5af06e579dd5f400f803b4e24bc1020740b0b8a","sha256":"594544184c059f885e1499c36a4147c3d3b41ce4f50252ac245a3a5faea6c72f","sha512":"34c06275b329ac62dddd6eb3981ef47d022d4e841c6a2659b9c648e77caf58277c91d1aa1b1bc432cbaccf9e3a7c89e67a3f41c940637942e692c90db9d910e1","ssdeep":"1536:T4FysiYyiqM4dWrgU2Tx5hpx1/VjrHS+92eTa:T4FyPY+rEATHH/xye2","tlshash":"df5301e2be45d926afc2dbeca3bd561c210eddbd2480d11717d5eaa002c1dbaf07c252","first_seen":"2023-04-17T11:05:44Z","last_seen":"2026-08-15T11:25:22.038867Z","times_seen":2801,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/Odometer-BrD_5lSq.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/Odometer-BrD_5lSq.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5421\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gTHug9B9zOLmkLiugwAcyv%2FC%2FLLpAZtfGD5P4Q4IjCYDYI2cj34UUmnOKekger5wctwKtuAN4H8NCVtryEnDS34jw%2Bx3VgH%2BDmIwIMCOvd16Kg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28471af52f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15462,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15461)","md5":"ecee9d7682188e6cd0acb84e200b94e4","sha1":"f02b9f2b5212ed4ab461340034155606a70f8ac9","sha256":"9e657a26d22b6c4cfeb2ce0e419253640b4fc555dcd5eb2198d31768fbad4c71","sha512":"dfeae4eb3de2faa3f007d0fac0ecbfd7c80c8e63b2e3c4a0d193f0aaa99d76d6d0ab60d2fdacb785dd718889d65d48d00825405fe4a333b6c5a73a573badd412","ssdeep":"384:wmNkVQ3W3r9JDiuyEmwHmP/T9tPpwxw1Z:pkVQmb9JuuyjLpow1Z","tlshash":"5b62098979627234836371e055bf4609773b6d6a3808405db6bcaddabe32c04d12bff5","first_seen":"2026-03-23T12:48:40.369535Z","last_seen":"2026-03-23T14:49:47.292451Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/Odometer-BrD_5lSq.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/Odometer-BrD_5lSq.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/JackpotPoolsWidgetContainer-GF_Y9WrY.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471612; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5421\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6413\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lzj2FCmja1VQwSLs0w1x%2F0eY0wMLZMOJ7Fui5%2BHi1YXHQ7UIhBKKvNVtw6AO%2BPXiC3IU4eDTMV75z4dH42t936veaQALGYb5M0KGnbk7WWQpDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284cad092f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15462,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15461)","md5":"ecee9d7682188e6cd0acb84e200b94e4","sha1":"f02b9f2b5212ed4ab461340034155606a70f8ac9","sha256":"9e657a26d22b6c4cfeb2ce0e419253640b4fc555dcd5eb2198d31768fbad4c71","sha512":"dfeae4eb3de2faa3f007d0fac0ecbfd7c80c8e63b2e3c4a0d193f0aaa99d76d6d0ab60d2fdacb785dd718889d65d48d00825405fe4a333b6c5a73a573badd412","ssdeep":"384:wmNkVQ3W3r9JDiuyEmwHmP/T9tPpwxw1Z:pkVQmb9JuuyjLpow1Z","tlshash":"5b62098979627234836371e055bf4609773b6d6a3808405db6bcaddabe32c04d12bff5","first_seen":"2026-03-23T12:48:40.369535Z","last_seen":"2026-03-23T14:49:47.292451Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/811.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/811.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 848\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:36:47 GMT\r\netag: \"39871631705ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:33:29 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 7262\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=6edhaUXg2GOAqETci4if7Gaq9rb2qTiusZjnaKzRiOE-1774276471.8785005-1.0.1.1-dvddL4e7Ey3jGXHvJAT0FpwXNRWsIDWHB7AbhgWCPv9xnZ.jiwSj8mia1mLjTNjzFrEnT5vjOKo5nrhfIs7pZGm1IY4P1pZcJB4nb.DkJQUFTmeJJPxCh9gnmFnc9f7i; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tn1r9zTCPpm%2Fv9QOIXYWJXq9Mif4MBUn97oU4DA7O2F2e7gafg4xc9rfDYRYdMf1XnDKI%2B3o3WGLr6w9LR6UvbFnmel8LY1qLEHOO%2FH9AXZAYU%2BZGt3Kj89deL4%3D\"}]}\r\ncf-ray: 9e0e284d38582efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":848,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"d7b86043b78ac9393730392fffe6e346","sha1":"c7fa35ac9613404420d61b649d55bc9daadba4ca","sha256":"049fd80ef53317cdde457a0754d73930aaa054e27fb183ce8a7f1ac42dc26b26","sha512":"88c59d7f1581a3759f139901cd4621d1a8ace9ebcb23130206d02c6c1f3400581c90d9ba174fead580a15807ebcd3466c481ee02b30d83e2e10089c13691fc5c","ssdeep":"","tlshash":"7f0186dee710ca6e4a8fe15370fa7c94edc7c1fd0293b318307dd51a155494314899b8","first_seen":"2023-11-20T22:12:27Z","last_seen":"2026-06-06T10:12:11.65921Z","times_seen":107,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/5/10165.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/5/10165.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 802\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 09:12:32 GMT\r\netag: \"3e5b32f755ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 20:36:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 64693\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=ynAKL_p7jRgvI8CJDhvjfMjuFdReq1_7niGS6VgbkiA-1774276471.8866289-1.0.1.1-8DWwY8pja28I2KiTAr7Ch2.vIkKRGsmx1ZbPjaWreA7B0c8lkCNxpgpMZobhN81fixOQsP0n5FRnOgf8kKmysOwYtDv3fTUHQ8od2kC7vkLu8wM3RkD3WsVjbMYu_kpL; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SNlkuGAl8y9NbY27ljx4nR2Kc%2BFbtSuq2NGmVrkFMOBJuiH9zniTQfCMUBz9MgndS5cCMkDXL6c%2FoPKcxnMIuKjs%2F22jzLZ4BCpRpvbutgzZUhJ7LLL5WLhS8AI%3D\"}]}\r\ncf-ray: 9e0e284d38bc2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":802,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"3bf5219e1c512566fe0627190cd5f355","sha1":"eae985baa5d58dc384f476ad6966689e8181ebc1","sha256":"a7da9db931534213c619befb786da736d55ccb146d4bbc469d634ba7bb8cdec6","sha512":"52d2f75cda5ce69d1274d78074024e4e3272c3d3c21c97837f4919444435289b858aafe4c42fccbc196e84bc5f0ac931151dfd1fc8e18547048eb5f95017e113","ssdeep":"","tlshash":"9901464219c17ca4084449bf325f1367429761ee8cb07486d4b094a9be18aec46e43e9","first_seen":"2025-10-14T15:08:00.059838Z","last_seen":"2026-03-23T14:49:47.193026Z","times_seen":6,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d0da3af.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"6ac4b41bfa3079e73da08ba512cca2e3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 471778\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e0e28521dfe75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14213,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14213), with no line terminators","md5":"6ac4b41bfa3079e73da08ba512cca2e3","sha1":"28236a6e21a500f8eb1fc0804ed1553f4b7fdcae","sha256":"b6ca684b4ef298f79d931ea40f8c3b597bd7e8d892a21e7cfc756cb3215792eb","sha512":"8fc4f8a4242748771f8a9220744ad1a1b501fa381ccbea978dc7062afee4c8788f2ad79a74572020146ce13610abcdba43f005cc36a2a455eb2d6a226a689f24","ssdeep":"384:UJw/U5YK8Hx9KJsThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJsThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"9052c6a7b2a4782d42379712308f3205f33b7d45b215da19f36edcea4aa84c16056f3e","first_seen":"2026-02-19T03:13:10.683375Z","last_seen":"2026-06-15T21:26:04.416628Z","times_seen":7904,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/87/175902.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/87/175902.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 6436\r\nserver: cloudflare\r\nlast-modified: Wed, 05 Oct 2016 15:06:57 GMT\r\netag: \"199be01d1a1fd21:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 14:33:48 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=SBaRoxd_xhe4EecyGulsBKtNuM2Pyr5sReyfThTD6Yg-1774276472.9104476-1.0.1.1-mhzdBP8CPxgWROyYB4nOgU_pun8_J07vsbAplZE01Kausn1ekAewqIb_kAuZ.ReB2xjFcoB3vkcXy2mam.2LAx_GvP3.hDF5Js.mDBkv9iDN.Zagj5_4S2qE29zQk5Jl; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fKB8WxLhhcU6nrchxeM%2FyYlxgDWzFw%2Bqi%2BKk1Qfv2gXybdPFP%2BjOSRVWfliLci6r86Wija2dKODjkSwM9GjAkL0qKXgl2m8Sg5L3ycGsJUG8PtwwutDaTetn7IE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2853afe10883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"6fded863d6566175cf7843cdf54f8774","sha1":"86b15a08e095f507ac9628b2bd0c71a5a0d0c138","sha256":"04b03b29d41f3136915da73fbbff376542964561dbf8bb28c16bb68fb518ce08","sha512":"67efdab43eb652ef9d1af856b722d3c055b3fe03488f98a1824a4a09be9fc3c5a625b8152c54353addb5d6fff1e312f5c3069311d0dd240a639946659746d21f","ssdeep":"192:uvs/kHLajfMJ+66zZomQUs4zBQfihEDJArRtNMA6xPMn8Az2O:uvs/kHLajf696zStUs4zBciKDIPG+zT","tlshash":"fdd19e8584c0dab7485ac8542e34021cfa7636af3a2412f7415eabdb052f7e8d95256d","first_seen":"2026-03-23T14:35:26.234892Z","last_seen":"2026-03-23T14:49:47.18738Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=ff83b5d6-c81b-46ff-a19f-41e5f7ea1cdf\u0026version=263.0.2.32.102.113.2.3.2.233.2.9.1\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"95.100.107.156","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_configuration?organization_id=ff83b5d6-c81b-46ff-a19f-41e5f7ea1cdf\u0026version=263.0.2.32.102.113.2.3.2.233.2.9.1\u0026x-region=us-south1\u0026group_id=0\u0026jsonp=__lc_static_config HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 1869\r\ncache-control: public, max-age=555\r\nexpires: Mon, 23 Mar 2026 14:43:48 GMT\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6154,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (6121), with no line terminators","md5":"9f038f2c2b082e4fb5012e03ed4fca68","sha1":"14d73588ec6523a072264fa8f3a84d7f325114f8","sha256":"dfea2a7df43a2ccdbe07dae60e9fa59ae8f44329a1daf8f060796e19d555dfc6","sha512":"b284e475071489da3f1fb7e6f5a9b718d355b51fd93ed77d644fe6a576c147c3e84243d934cd0b85875157ffd6d3ac16b85c772a7092a2ca93b01bfac64e17f6","ssdeep":"96:80hUsXhUA4hUwhUcaDl3acJ4t017gWrZSN+/9YXtJ/xN7QcGIIKTe3+/vCaq:FGsXGA4GwGJDngSZTqQ1Ih6iKn","tlshash":"62c17426835fc8bb7377925a62cbb70f3108507ca5f8593fe464ca7072861c7d202d9a","first_seen":"2026-03-23T12:48:40.643776Z","last_seen":"2026-03-23T14:49:47.189098Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/index-h75ZG17f.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/index-h75ZG17f.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5861\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ThR%2FGDUR2FOvrBvOxEYyrOuyTU4FFPCfEL0eEOFOTj9BsSClKM0IOT58EWV66NMZS26qWN2H4ynGxZHD2SpKRpUy23F9vK3SIsLLoFDo2qEQBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2841fb802f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":18027,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (17806)","md5":"e6fb5f626d229ec37be21290a0b075e0","sha1":"cc3fa867dc94d03668dac111dcf3113dd4301ebe","sha256":"e504d4704eb38187c36019a064d0bee4d69927438fe08c7f2805081e77a45bc5","sha512":"e909939889e127dccada323fe75003905e68c679aa8f9ab84a0221c8b470d2302f09162c12a7d855579e66fcf38c49824a2a34a4903e54dc6fa7dafa591a84f5","ssdeep":"384:0Mci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJD:0Mci408FFnJrIjE3D/OY2E0xqpc1NKki","tlshash":"818209d0e3b4f7a642e86add80392074f2248c28747dd0f1b6b6edda70664ca856dd37","first_seen":"2026-03-23T12:48:40.531882Z","last_seen":"2026-03-23T14:49:47.299999Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/events-u_DN57Vs.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/events-u_DN57Vs.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index.es-BOQ4Bx4Q.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470271; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2034\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8mnylQEFSFKY3a76NIEvfmmTFXeU3x8cotphmMPaTDeftM10ox%2FVoXvibItHKLd2URmqc5%2FB7amkLzuZQ40BJ%2BnzM%2Bd7LaPWGR%2BGjasHqba2%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284398772f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6141,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6140)","md5":"ad98ec9ddada2bcd31bb022c30f7f60a","sha1":"d7a51ade0962e799f9e3e0bd852dfed3b467f387","sha256":"000ff9760d94fe967a26f6c9ccebf318fd3860f73a1e61a546bba7ed1c43ecb0","sha512":"cc97f67671f03b31b9bf8b22c19bebce24caf2b996124f07de0732aa43566dc2723a361e1023a260f248b9b01275f248ebc141fb2fe25bc5abfc0184e426d8ba","ssdeep":"96:7d9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:73IM2sWMtBq6n3PzH","tlshash":"23c144ccb38574b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9e4126b78","first_seen":"2026-03-23T12:48:40.351459Z","last_seen":"2026-03-23T14:49:47.225803Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/InternalDataspotTracking-DZHbA2K4.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/InternalDataspotTracking-DZHbA2K4.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index-Cq3w_vEM.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470575; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1470\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6W7yL%2FQprMChCV3KmJuQgjNxtVmp%2FM9HWbAGs8Kg5NgI9gKAh%2BmDSqV0Nmpr1IrZ6YjnecoYht4Si4%2BNEIlc%2FHKZ4FRX7kY2IMJgZO0kowMeVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28456e632f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4012,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4011)","md5":"11da725be76bb8886a2752d6941b21f1","sha1":"1925195191d9f09d4a24262941fe45c057e84196","sha256":"029d649b0851d1c6309944d56cb7b71e2f57780e1a2552d3aa05edafee2fb345","sha512":"025b0f87a0551e3d78d7fa354bdfc8514cacd7c6c1da2971a134a8f43b0ab30df1f8647379a3cd8fcc683abc459df8a4a3c9b802273764200310fb0919957586","ssdeep":"","tlshash":"6381961fdc3c08b0b060c6dc5837d566856c3c96a690dcb060378eaa661fe45d7f6e97","first_seen":"2026-03-23T12:48:40.283618Z","last_seen":"2026-03-23T14:49:47.233737Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"galabet.winwingames.io/check-auth","fqdn":"galabet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://galabet.winwingames.io/","date":"2026-03-23T14:34:30.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /check-auth HTTP/1.1\r\nHost: galabet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://galabet.winwingames.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CwvjFwdTv22KhDgjokiPFZiqU1kP7adCXLO9DPAYPxMlaX1UP9fbg5u4tU8pDO29pKpuBY8Rh7buyVAfidYLse2ubOmRVZENQlsNJIjHo%2BbJgqjKmAI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e0e2846ae8a2d96-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0d0ef894fa1c5fc383cce96e2d857de6","sha1":"fe19a48e71f224e79f27804ed7d5632c065e5de3","sha256":"0b3443a9377c829f10dc4dbc281475c7bf89f141d56af637ad5c59b74d00b2ca","sha512":"988a2be034f9f80c25a7cdcbd2659e4310baea3e590b0f9fe75ac9d0d7b1d90a8e8b07f33fde07627f3f61eae405d36f9afd6cbd20061b3088ab844a0821abf7","ssdeep":"","tlshash":"4c70000202000222ea80000803002a3388008838832020200008a02000230880002802","first_seen":"2025-09-21T05:18:37.922942Z","last_seen":"2026-08-17T06:04:26.032592Z","times_seen":108,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1060.com/storage/medias/galabet10/content_751_fa36930f4e2e3bedb8b2d61dde981bd3.webp","fqdn":"icons.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:36.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_fa36930f4e2e3bedb8b2d61dde981bd3.webp HTTP/1.1\r\nHost: icons.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: __cf_bm=gSPSH_YPGT6wuRZJOa._zBHpOZQ7b.HI.mvY_aUVADw-1774276470-1.0.1.1-c4WanWXkKDNCzoo_AAgdxaGsAN5.OaAtOm0aRqSCoX7MuZdJUQhoOB0U3raUNHhF5sS9gZB0OgxAbemZEEi5pKXWdSJr0VsehJFxChWVLMQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 49786\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Mar 2026 07:20:18 GMT\r\npriority: u=4,i=?0\r\netag: \"69bf9832-c27a\"\r\nexpires: Mon, 30 Mar 2026 12:47:44 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 6412\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=T2CMWM6AKVqF70.3m1NcdFi_c4Rh2.2HbPF_9YwVPPg-1774276476.522644-1.0.1.1-_8DzRuspE3U_wmApKh32J67uWdbxPBoc5cL7Sa0DQ6glvowaSz5Z33NWKXr7mSnXZcXFmIV1O.wc3EvZ6wWv._3V5QapcMPTwr_5rPMqpSY52iOSpHM6zODAqVcdAWtz; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=119c2zlv1Y3kgJostDGDdX5wdPOGZCXzWqxJ18XMwTjS3L1DH%2BneoM3ASgLDWkXUv7FSBUKP8la%2B%2Brp6qigrUtal9JzYWgGKV4NnGC5T5uDK79QcVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e286a3806b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":49786,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x220, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a07f1e76b33ce1b581582869e536afbe","sha1":"add5d6bd816b07ad293d06768ca79c88e0f9a46f","sha256":"a582e44f3a8baf9270454653409f51ad6adbda74a66fbcec10710b9b1a86f61e","sha512":"53aca61dc2f30b320ba83b588c0632d66d9fe7ad37d9fc2d3241fa2ffbe7feac96d2c872ab6576c5704911c2e14a425f8087b08592af5c6b66f6a65997ba9ff4","ssdeep":"1536:qL0+jWnVvt5Rvk7z62LaIIpJf2cc3/A1fqcLb9W9kjJdA:X+8vtnvWLCpJfXYkjP9qkTA","tlshash":"102301b2a5c9c5c40ee48c2af5250189d4fb7a30d8f94ec29ba4042fb2ef34a4998756","first_seen":"2026-03-23T12:48:40.612586Z","last_seen":"2026-03-23T14:49:47.237397Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/flags.png","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/flags.png HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index.ByCopC5T.css\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470271; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 94974\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:38 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xeggyNegcxaHGJK2l4%2FyHQPxj%2BqoOKtr2z0Z2N6TkkyVr3mbyXPadqqXfiC12TVLG0lkJ1Ke8Vz8dHmJNsooFy8EPabcYFjf4uZPfdHvHjclHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28443a252f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":94974,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 17960, 8-bit colormap, non-interlaced","md5":"02c3b5af3d0ec1f21c51bf21a22241e9","sha1":"c39c097d704c754294e3fbed23b80e502054396e","sha256":"1c0578c469db9a3da5c0b6fa0258f99b2a2ac602d0027ab6fcb7b218c3acbb75","sha512":"bb097e3532e83aa4db8e8dd7cd16d95d83ae77f4cc19207f04f3b929ca695ebcd7f5730e9ea888763108c95028f40f81490a03093ef8d57665c6f4393091dc63","ssdeep":"1536:wxq8h3gUrI89XxfLcduXa08ucH+te2RIr8T8hKdPzgkjM+PDRzSKR2JLDpzm5NLX:Sq8h3e85FquXPAeExk8odPFg+tzSKe3M","tlshash":"509302ab06de36c6e10b2e9408902d3c720f65fdcba545ad497cc743d8e5a68d48feb4","first_seen":"2025-12-12T09:55:43.277784Z","last_seen":"2026-07-30T17:46:53.0994Z","times_seen":839,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/CasinoGame-5_-m-aKj.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/CasinoGame-5_-m-aKj.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/AiPromotedGamesWidget-B7AYafeb.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471318; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1992\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aI47zW8Lnw5p4J4%2FTzy%2FQ5pvuxgg3c4gpiSV%2BHSj3JaraHbV9s375QYyf953pZgxn%2BuiY4dAzH6lL%2BQqUmagSE6IAMbObnb5Q%2BWtQjo1z9dFIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284a1c882f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5827,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5552)","md5":"ceb1657abd1bf321ccb354977c56da7a","sha1":"e1ae62fc87a2ceb93cc2116e93043087caed0c9e","sha256":"9486e7fef3c0aed6a9729df6b2cb7e0b1768fa8e88dce3df10ad5fee55d7d5e8","sha512":"8029d7f9ec329b161616a1d2384da322bc45d27c8fef81bc8c0bfc92531a1b4f37b9fc8c7afc3401b803f6a8675d1025f398191a48ad285b34743e62a39a2c76","ssdeep":"96:jQ30A5ySp8LCdLUKZUBbiRx2VZZ9L8O7XT+x2mZ97vCbeKbAFSvu:Ux5yihdYdBrDweXKJuQFMu","tlshash":"77c1a705e020ef7db93a0cca986f102978191fd2de198465e47da839366c11db267bdf","first_seen":"2026-03-23T12:48:40.387957Z","last_seen":"2026-03-23T14:49:47.270853Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/0/247.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/0/247.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 785\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Jan 2016 08:38:14 GMT\r\netag: \"50789f64705ad11:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 09:06:18 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 106093\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=U1BE5s.E5nyUN6aviBQTMyxq7yQCOSNf96c62rNPsXg-1774276471.8799603-1.0.1.1-PURDxBAr9Gr32WQkzXva4X3SW9yji440CrqXmqNv4aOYkc.4gEpirLLn56Z0zHzz0UpR16QAk5U.LueoZOdXe__7oA4AqAtexiIj.opp0RtHyb4k8ZmJo04jvKjuFjCn; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JrUFgfaXP0UZRxmergqfB5IdiSiLh7wnLxfwZzGgCUY%2B5eH%2BkP6akojUhGjvoUJR3DRJYRJS798MlFxzwRXwdtNXQdum5DUitL3lqfO4JV5NdpoTCz1T8Q6uuhI%3D\"}]}\r\ncf-ray: 9e0e284d386e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":785,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"e9b7da3c5168ccdfadd7f328b7257a04","sha1":"600429eb57a5a60fc952ab916477aec245bde74e","sha256":"b162f434541afdb3c9ff322a56ea6e40b0e8dfd9b43f8098dce54062e4af1f8f","sha512":"76a7c5cfd10e5fd926a38b5a7c63ebf4ace537f7f10a8fc564b8169b69e651e6c0ed249b3af376ad90c24e24d23e7adc9b91bff2b8d1f7d00cf084b6c55944d5","ssdeep":"","tlshash":"16017518d903687e454af068d5f34093b06b2680749a7c9aadf9c0acaa140d0e2d4a64","first_seen":"2024-08-19T20:31:49.092346Z","last_seen":"2026-07-05T06:23:31.060308Z","times_seen":129,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/17/34941.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:32.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/17/34941.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 8090\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Apr 2024 07:39:08 GMT\r\netag: \"d8e7c85189ada1:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Wed, 22 Apr 2026 12:47:40 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 6411\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=6ptbZY0ocTPLiPgfmtvsGNB5q1aSYdIv.Eibz5Mh7B4-1774276472.5312667-1.0.1.1-wnEb6mHTmEG5suF7Th0v6phtNN3H1Nm6vbjnxh1LR41.M__RQzD4XvlTcsRcM7xONDLyfiJACC0O7IS3ieqnQ1l0whSVZBLc_1k0SYnz.H9fkr4xPV8eTJMCjcfm3lgE; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o9SLKfWTM1tmYfLknJ1VtoSyUke1kASRXFJVLPi6zm9ozLmp%2BiAXM3E58oI08wsAhzf3F%2BsZdjI%2Fh%2Fc2u%2BTzRizFt5lQ24%2BznXq11nwjfYv0SfBZ6K3qE8aS6bQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28514a180883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8090,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"1bfab54946fc0e02e215548fae2edb03","sha1":"5224594af60cf7dcf695fca228b5cba09089cec6","sha256":"55dc496f710a1a3cab65facc90aa07834865703dca473114bcb67bd88187d669","sha512":"f3d6952e8701eb7b3e71e51de480c7d5f58807a4c9ba46cf0e6f14358fd6aeedc75f5420ec56e5fc2fbef0b400ca03cc7cd28e30344ac0d03576480ad99b828f","ssdeep":"192:ol6FQWyx1W6DR+sk3Yx9LXOGwKEqPpMMCt:Q65WpDsNspOGw/qxS","tlshash":"5df1af9233952cbceae6e7868237d1f9f37d4cb94532ba2f97940818606c73503640d2","first_seen":"2025-10-21T09:09:08.943564Z","last_seen":"2026-03-23T14:49:47.188515Z","times_seen":4,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/b/474/949674.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:33.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/b/474/949674.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Jun 2022 10:55:59 GMT\r\netag: \"62b98cbf-9a3\"\r\naccept-ranges: bytes\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=_eOpqM_W9.a5xTR7aHEKirS6hCn8tapCZYo5ClMLhuU-1774276473.01036-1.0.1.1-Q13kU.ICMWiFWT4EpFNQ1Ye3UhIB851xhsf813dmKGp6tcjxSGsdZ1SMBjcI2a2gNOzECmKKW6gbA4eQEIh1a0ISo5yb_xpKt83Bq7VQUoOISlhuB091N9G1XhVHBkJC; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:33 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MXzp3ceqANsWA%2FOeIumvoCIXvAg5Ybh2MDU6sgFG5YiBzrM5WJTcXG2g4IiBDbKhi30GpcDWNAMSWpZWQpQ7tHdgSYsJ1%2Bhm5myESNWDRWYSrxfKBJMLC4%2Bpz64%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28544bbf0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"87af8083716421c45adf7b89c550fd95","sha1":"2eede979dce324b9cd8c9e45a4f1d89e27c74716","sha256":"a748f909eba7de62cc2b5325d56fd19af99dde087b3e64d9b759771f9667a356","sha512":"d28a590f64e63a3c78c08af9e4a0ea4655978ac7d5f327c10664f2bbec15013c80b735f97abe45164945e1d95a9a611dc3cd71ff084450c4c554ec3f72e81d07","ssdeep":"","tlshash":"47512c2db451c5b1b0ad894534db503397230cc5eddca7a5ec4e642a0d2ccd9609dbcb","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-08-10T09:12:16.484033Z","times_seen":221,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.recaptcha.net/recaptcha/api2/anchor?ar=1\u0026k=6LcKXcgUAAAAABnErUWDwYMpRiWUfgDhsWTkyPIJ\u0026co=aHR0cHM6Ly9tLmdhbGFsYmV0MTA2MC5jb206NDQz\u0026hl=en\u0026v=QvLuXwupqtKCyjBw2xIzFLIf\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=eqr15pe79bc","date":"2026-03-23T14:34:34.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/QvLuXwupqtKCyjBw2xIzFLIf/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:09 GMT\r\nexpires: Sun, 29 Mar 2026 10:06:09 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nage: 102505\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-08-17T09:39:38.062121Z","times_seen":710389,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/BetConstruct-Icons.Bc7YesUK.ttf?krqdvb","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/BetConstruct-Icons.Bc7YesUK.ttf?krqdvb HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/index.ByCopC5T.css\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276470271; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 467989\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 12:47:38 GMT\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5KxShPA8aQJN9lR3bxx4%2F0KjUbarEwBxssVGJIYNpoaj%2BvcjsgEO4UovKfMLt5Dc8cEVf4uGBECNkcO8Aky7HXfy49%2F96aOyo0LqiyUHMcxeHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28443a2e2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":903740,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, BetConstruct-Icons","md5":"397009c27e5053bb6a972733234a1be4","sha1":"1222cec05f1749694c21b02ee78372abe7f80a56","sha256":"132780945c24246bcf8e288c60f6c3e6f601c23f2283fd46627e7895f84723a1","sha512":"c06a8f16974af071c8d4289917ad24eec10db060c43d8882213f96c7b81eafaad7634caa1ab98a807155fc836f4ae633e62d10ee84f85491437928b12fdbe09f","ssdeep":"24576:8MyN42S4YtdOEEF52XCpHVOj9yQcCL6L3GeM:lB4lnEfeM","tlshash":"11154c0b630edfca604261d30c56a01b8dd6e2095b3b9716fe8d9d24d261be44d3e7af","first_seen":"2026-01-21T04:02:17.070953Z","last_seen":"2026-03-23T14:49:47.191395Z","times_seen":6,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/FavoriteGamesButton-dN714PS3.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:30.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/FavoriteGamesButton-dN714PS3.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.galalbet1060.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:30 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 281\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vxYln13rY85giB1ysipzlR%2B1DCqdsjk7%2FUZ3hWUGPak%2B5uAWfspMbRVqZuuN%2BsOJaMlNc2sfcMXH%2Fbit0ZMecLUq5pDpBjGPwRRcPmFuPoUl1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e28453d9c2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":427,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (426)","md5":"828fd99e3d19001747ec2f0eb0af7009","sha1":"9980992e4715518e0c1e6a9d58e120044aa98d8d","sha256":"8eb17858648977906214aba5e0a924408c6c9daad69bf84fe5b6c549fa318e99","sha512":"d7a8474a8d5683f9262a60c5e8b8351ff52259cc321589b25bb30cb4f76305944e0c30324adde0da9d905cbb90479a8762951556a4a397b5134efa6c770f9a0d","ssdeep":"","tlshash":"65e0ab4bd08de2fa2b832be06613c024282ea47ce75ce090409e286439b045bc91e96f","first_seen":"2026-03-23T12:48:40.567392Z","last_seen":"2026-03-23T14:49:47.269894Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.galalbet1060.com/assets/GameListItemTeams-B3T5Xf9i.js","fqdn":"m.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galalbet1060.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Mar 2026 14:47:06 GMT","end":"Fri, 19 Jun 2026 14:47:05 GMT"},"fingerprint":{"sha1":"D7:3C:52:EE:37:4C:E4:0B:96:10:9F:99:2C:90:8C:B1:3E:88:CA:65","sha256":"34:60:9C:2D:8D:92:6F:25:E5:16:E3:EE:41:DC:78:8C:AF:E7:E3:BB:80:02:51:2E:34:09:5C:1B:09:B4:E8:EA"}}},"request":{"raw":"GET /assets/GameListItemTeams-B3T5Xf9i.js HTTP/1.1\r\nHost: m.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/assets/PopularMatches-DWx3UOYn.js\r\nCookie: ci_session=16e59262b1949c261895905d6c08fdee53cf20c8; TawkConnectionTime=1774276471318; twk_idm_key=Ax1tIpkueYdP8a6wWFjic; _immortal|user-hash=by3bz9hUnoddl7UiImYBvqw0XzTJErSTbj81\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 665\r\nlast-modified: Sun, 11 Jan 2026 07:10:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 6412\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RxeTX8FzGWhoscxoOAfX6PxBqTTWJkaYg8tkRWQmtUoPQyngf%2BAVMImelAc12ohSHkhxv9stETw7ezIlCEqjAkH1c%2BLdZB8TlrUAQrxoJ8xlPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e2849fc2f2f72-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1538,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1537)","md5":"67accc82f86da0497fa502db5f6076e0","sha1":"cb05c27dc32f2194dc13d7c15cce931f1fcb73e4","sha256":"bd85a9858ecdcf9de6949a0888debacdefe5b47838930aea2bf423d8abbeb160","sha512":"f5952efafc82acb3b8f5fde12dc723970ae2376c3af396bfc2dc9545aa6569bd7c52c3d8eef1cc23d451493c6545b8e263006fdc3108b24e22f5d0a66fbfae92","ssdeep":"","tlshash":"c3310045f020eefdfa511cd9e87d4136711a0af5c73c52d1a16ea6341a3402b771a7de","first_seen":"2026-03-23T12:48:40.665355Z","last_seen":"2026-03-23T14:49:47.19248Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"m.galalbet1060.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"m.galalbet1060.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.galabet1060.com/storage/medias/galabet10/content_751_772584de349d18d1cda6a899ddea7912.webp","fqdn":"icons.galabet1060.com","domain":"galabet1060.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"galabet1060.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 10:12:38 GMT","end":"Sun, 24 May 2026 11:12:35 GMT"},"fingerprint":{"sha1":"70:28:3B:9B:C4:2C:22:12:AB:8F:23:CC:7A:C1:26:9E:D3:2E:8E:FB","sha256":"03:35:0F:98:EF:81:8D:07:D2:54:F4:1D:18:75:2B:3E:9C:99:B3:60:42:19:0C:98:B2:2F:33:DA:80:21:CC:F7"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_772584de349d18d1cda6a899ddea7912.webp HTTP/1.1\r\nHost: icons.galabet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nCookie: __cf_bm=gSPSH_YPGT6wuRZJOa._zBHpOZQ7b.HI.mvY_aUVADw-1774276470-1.0.1.1-c4WanWXkKDNCzoo_AAgdxaGsAN5.OaAtOm0aRqSCoX7MuZdJUQhoOB0U3raUNHhF5sS9gZB0OgxAbemZEEi5pKXWdSJr0VsehJFxChWVLMQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 48880\r\nserver: cloudflare\r\nlast-modified: Sat, 21 Mar 2026 08:28:07 GMT\r\npriority: u=4,i=?0\r\netag: \"69be5697-bef0\"\r\nexpires: Mon, 30 Mar 2026 12:47:39 GMT\r\ncache-control: public, max-age=604800, immutable\r\npragma: cache\r\naccept-ranges: bytes\r\nage: 6412\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=7.n9DtDAeE3qmN9MHRBSq.xqpvrwdVIp1yBqRV6CPU8-1774276471.6648474-1.0.1.1-odJnJtNZWHJ9tbT.pDrAq9lJAR9Mx9XgIPoBl_9qfX0ATViGiHaq8xqwv9ohWX.0YW0QHB.tC5iM_2rbkA5GlXMwGZzoPEFRYezPaoBbf7sQG_2aCIykkr28q.4qlcuG; HttpOnly; Secure; Path=/; Domain=galabet1060.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8wyTgRU0S4xH4SDskJs%2F8Pvl5Jek%2BFe2GsZrqR8bwemdPTPm78VxkHduU%2BsSPvr9T9avk3kQIztV1MEsAFRf2rzkyoQV5wv2rc7YAOVr%2FBRYCdCHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e284be85ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":48880,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x220, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d5c577d27fd4e067a1b584b5cadd92c6","sha1":"4dd6534f30dc02755b3f41ec88e34859d2695d07","sha256":"84a32fd011e01d249b45a133a2e61135608eeb3882cfd10336e97b6a6b8dad22","sha512":"cca658836cc29e741c642ab98130e8d6dc7db874332a44377fdb055f86eb92ee1e7d16132c394adf3971097c8ec78092dcc48c086bf6d33d87ef95639c1b8b01","ssdeep":"768:LAdoCpJlH7vPCRoC/O6Hs3EECzxaNPG/G8Il35ExcRbqY91yJs/UUS/O2Eb2V0Cm:ECC1jNivU+a5G/1xxcR2zhNEtCm","tlshash":"c0230243b792863d750f0871b6bd9ad8042724a1fd27be4d356e1ec0c64ad3aec8af54","first_seen":"2026-03-23T12:48:40.332334Z","last_seen":"2026-03-23T14:49:47.195971Z","times_seen":3,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statistics.22btcoservice.com/images/e/s/17/34941.png","fqdn":"statistics.22btcoservice.com","domain":"22btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"22btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:35:24 GMT","end":"Sun, 26 Apr 2026 10:35:21 GMT"},"fingerprint":{"sha1":"06:55:8B:D1:5C:0F:14:B3:39:02:45:D6:4E:1C:DC:55:2A:40:8A:F1","sha256":"9A:E8:CE:A3:74:24:AE:68:E7:63:33:2B:2A:75:94:7C:C3:F2:4D:4E:09:E7:5C:96:24:25:8B:A0:85:05:80:CB"}}},"request":{"raw":"GET /images/e/s/17/34941.png HTTP/1.1\r\nHost: statistics.22btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:34:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1640\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Apr 2024 07:39:08 GMT\r\netag: \"97accd5189ada1:0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nx-powered-by: ASP.NET\r\nexpires: Tue, 21 Apr 2026 20:42:03 GMT\r\ncache-control: max-age=2592000\r\npragma: public\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nvia: 1.1 google\r\nage: 64348\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=WeT4lvvPCDli5XOwOMyw0nBmIfBvXwZBYQxPXViMiIk-1774276471.9439862-1.0.1.1-6D.drW0XBWHYjIUvjThTx4rUHSd0OA.X9sPjsuSIS1bGGZuFnduu6ej8eZ.kXm0TF0qJ2QTE8zZnLDWYbFXjBpVvD4Rn9nWCIGWXLdK7wPam9Ndv8BRkMDTDzxjzHF9J; HttpOnly; Secure; Path=/; Domain=22btcoservice.com; Expires=Mon, 23 Mar 2026 15:04:31 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZUH1g8S%2F2f%2FRfx0fx%2BY4mFk0xsUrPioM9Ht5thWQo98CvXwzt0YTzwFCmDvdOy27AxF7VfvJ1bt1IYkqVYKSq%2BuGDmb%2FaeujeqH7vTxEyrfY62HxKHK7m46Sixo%3D\"}]}\r\ncf-ray: 9e0e284dab102efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":1640,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"832c4641c412723cafce9b8cc4f9fa26","sha1":"80bada3885de7bb675810be8eea01e53c07c9943","sha256":"f43c51cbf80db09440fe7b6f732133689a71e9d7a96f6ddf94c5fa6e8e350a25","sha512":"ea8de54dcd48480944a8a7ad6c5b5d51499af7bb50b7d1be4d29b7d3882c16b1e256bd2680d31bef86b39750eddea43a16ac4659c86c0bdb86a9990c6e6a9944","ssdeep":"","tlshash":"cc310ad74a732f4a053c5c3a9fa720f1b72011773103da096a7cdf402ba4f22cb10a86","first_seen":"2025-10-14T15:07:14.488887Z","last_seen":"2026-04-02T04:09:05.954437Z","times_seen":27,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":92,"dns":1,"connect":16,"send":0,"wait":12,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.galalbet1060.com/configs/928de3c284a560a4ec2990544700741b.js","fqdn":"dataspot-int-bucket.galalbet1060.com","domain":"galalbet1060.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.galalbet1060.com/","date":"2026-03-23T14:34:31.880Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /configs/928de3c284a560a4ec2990544700741b.js HTTP/1.1\r\nHost: dataspot-int-bucket.galalbet1060.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.galalbet1060.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T09:43:02.208337Z","times_seen":17933663,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}