{"report_id":"21d7996e-5579-491b-bf30-a7039dd8b4ce","version":6,"status":"done","tags":[],"date":"2026-02-24T14:17:57Z","url":{"schema":"http","addr":"m.m-galabet1052.com","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"104.21.73.90","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"m.m-galabet1052.com/tr/","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"title":"Galabet Güvenilir Casino\u0026Bahis Sitesi","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"m.m-galabet1052.com","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"104.21.73.90","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-31T14:17:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"eu-swarm-newm.m-galabet1050.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"eu-swarm-newm.m-galabet1050.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":4,"received_data":4134,"sent_data":2296,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-02-23T04:05:34.530775Z","alert_count":0,"request_count":5,"received_data":8392,"sent_data":2640,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vsa17.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":3174736,"first_seen":"2020-03-11T12:02:50Z","last_seen":"2026-02-20T09:44:43.81141Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1083,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-22T22:20:46.526035Z","alert_count":0,"request_count":2,"received_data":456014,"sent_data":912,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rgs-wss.21btcoservice.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-02-24T14:18:07.307752Z","last_seen":"2026-02-24T14:18:07.307752Z","alert_count":0,"request_count":1,"received_data":1115,"sent_data":575,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"cms.21btcoservice.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-01-26","domain_rank":0,"first_seen":"2026-02-24T14:18:07.298566Z","last_seen":"2026-02-24T14:18:07.298566Z","alert_count":0,"request_count":58,"received_data":2842610,"sent_data":34468,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"m.m-galabet1052.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-23","domain_rank":0,"first_seen":"2026-02-24T14:18:07.293776Z","last_seen":"2026-02-24T14:18:07.293776Z","alert_count":366,"request_count":122,"received_data":11167733,"sent_data":81709,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-02-23T02:57:59.281263Z","alert_count":0,"request_count":22,"received_data":1125427,"sent_data":10138,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-02-19T01:12:38.826767Z","alert_count":0,"request_count":8,"received_data":451363,"sent_data":5122,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"geoapi.qaxcraveniq.com","ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2023-09-16","domain_rank":0,"first_seen":"2023-10-20T18:19:30Z","last_seen":"2026-01-06T05:27:41.458907Z","alert_count":0,"request_count":2,"received_data":2284,"sent_data":946,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"dataspot-bucket.pwqbfyjubdrmatch.com","ip":{"addr":"185.162.230.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2023-02-23","domain_rank":0,"first_seen":"2024-02-24T00:44:40Z","last_seen":"2025-11-19T09:39:31.37495Z","alert_count":0,"request_count":1,"received_data":2208,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":2,"received_data":5296,"sent_data":931,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"crm-lib.fasttrack-solutions.com","ip":{"addr":"172.67.73.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-28","domain_rank":1905587,"first_seen":"2019-02-04T20:13:24Z","last_seen":"2026-02-10T04:19:42.461673Z","alert_count":0,"request_count":5,"received_data":2899790,"sent_data":2448,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","size":324696,"data":"","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-06-15T21:26:04.431869Z","times_seen":12669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MCEY36CK22","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc7c2cce6198c0ee4a558c93122b3268","sha1":"79a9bc1e6d510d8e53efbc878d5a09d15d1d8f87","sha256":"b1d30cf0305d1c7541704563003fea95c2cbf15aa98446b2253224decc484204","sha512":"e8422f2f24fb498382417ddd578931b18961234cd9ce3f2bfd34a4775d00af32b636be74e7a8ee2dcc9a6fc1f9cc5b7cba8af8efead12e9f521ade324af6ba54","ssdeep":"6144:vMdmO7CW6y273J5wYygLIR8Nyk7pNH08pddlmOrELkS5fenMcm0v:v4uW6y27ADEIR855VrEff3E","tlshash":"12a41bce73d670269396f478503f018ba57b29a2b44dc89af189cce42d74a5a4237f7c","size":455117,"data":"","first_seen":"2026-02-24T14:18:16.839349Z","last_seen":"2026-02-24T14:18:16.839349Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/tournaments-CYk8Ngz3.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"eefc0a802a5aad42389101eb604e2302","sha1":"adc4c38fd60efc1b91723f2b848c2822931c7071","sha256":"84209448a17083ea474acfc2fc0fc5b75d67480ade1e5c9602a3e57cc104cbc7","sha512":"9040f290a98e74ffe77672b6d2c2605113c1a279cca62bb3274ca5f20c3fdc031c2f87fafce96104e0db8f141c6031b961d778cd8a11b9f91ae86eb6c0578de3","ssdeep":"","tlshash":"402120c8ceb01f3ab1d7d0ca1c12035225b125556fc1a650932eaff8410874b87ff76a","size":1295,"data":"","first_seen":"2026-02-24T14:18:16.770448Z","last_seen":"2026-03-14T00:30:26.660061Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/pageBuilder-B2dq9y0I.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6259cc18e784776243f28686559f647e","sha1":"496d6373c2ed418a693c06b59e8fb1596a8d14ba","sha256":"4d416e9394ee122dd40d960fde7fef832591e2a61405b76cfd5447dd0d97bdaf","sha512":"0081c6501437de8231861288917f6f09b3cc8f1edb90f7e4ef6a217d18c8fbfe5d7d17e73006b2cbe3fa49c9730cfa340c87358ba4d20598471872d9d1c36588","ssdeep":"96:MBkN7c2FclrCl7VxgIKekapRHgzElsKmMKc1qKyDdIxsvLlmrVCi3XMCWhn1fta2:MBkFpFcsl7V6IBkaAKGH6Ii3XM/hn1fn","tlshash":"e7c150aac20f1e6deb6b137461b41b201e5a1965c9d294a4df8c0f3f05fb0cc91ba76d","size":5676,"data":"","first_seen":"2026-02-24T14:18:16.841538Z","last_seen":"2026-03-14T00:30:26.770845Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/JackpotPoolsWidgetContainer-NDxTfZwN.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab36e42812a4569c428f821a018ce725","sha1":"69e7de7f721b25933ce5d10707ec4b26921ff70b","sha256":"97561fae024101adf53a8a3c17253114ede06d2291eeebf6cf530a36baf907e1","sha512":"09f1d5615ea33cc4fb791fc308a2a65ba12aa83fb00c888cbf2e07270a4515a4d0fe4aeac5d82393953ecfbf5ebd4a88b6ac99f3ee0524257e203f7f82372581","ssdeep":"96:qwmRVlDy1+0x0Pwtym7sOAhbwTXflhB6Qhf+WORmfJ1QGRe+y95VFb8+TjCIeFMw:JMHDWtbsbwjIAKC28e1LV1TjCIBs3","tlshash":"c3f12109e452fbbce8e948d3497f403d275f0ba9d7a500e4d0bc9a345e6c88eb61578e","size":8069,"data":"","first_seen":"2026-02-24T14:18:16.847404Z","last_seen":"2026-03-14T00:30:26.66393Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/tr/","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7eeddf394c97fa60d5c523d35677e994","sha1":"5c89c3cc4a4e866462c73f3875706a680e98ddc5","sha256":"f035a98bb8abb7b146f1abc1f198ec93d4b19dfd5f19f447a38e0790d1221be7","sha512":"2ff71fdda7b34d56f6ac89472253b2eec98c73940ced87dba52b3ca4ec950937f26ea893327d09a9dcdf7462fa30e6ff1e0701904a7b5320028f6c486338b17f","ssdeep":"","tlshash":"dd217b55b4f96ab051733329b38f4985796280a35905bd063b1c1be01fd946d49a22ae","size":1214,"data":"","first_seen":"2026-02-24T14:18:16.996983Z","last_seen":"2026-03-14T00:30:26.843135Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9deabdd1848c34f3ab46722f446c153","sha1":"ca3efc8a6fe26ae3556374b113dda96032edd201","sha256":"6a583970080e55cee4ced2fc7d5e5de94283f0e6eea428a50219b8e343ff0890","sha512":"d260841afedfa06bc864b92b64cf3bd1a323b2de447ce38cb1499cc6fccfab0da309a76814b6cfb20fae85fb5707fc72fec9996b64bfa31703445d6a933daa3c","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOrcErQYIMPdLMz9o115:kyWFW1W+fM4fFkBLMz9215","tlshash":"7e34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","size":240941,"data":"","first_seen":"2026-02-19T03:13:10.643204Z","last_seen":"2026-06-15T21:26:04.425371Z","times_seen":11131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/InformativeWidget-Cz5N_F7Z.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dcae56eaa8811d0f9998fdcba186fc1","sha1":"d5b134564b22dc9154e3946c1e5ab34cbc4ef418","sha256":"d4a3883bce88c67e5369f36975081876346cbcdc0b43493f6cc90790b2f1d08b","sha512":"dd01e70a0a10fa3b67c9d0470af5ba9bf562c2b011b706794f71786f820822d3d0b0aa3140ae651edec177e839f4d3f96c318cc2db7446322a4542c8275ce384","ssdeep":"","tlshash":"d611a585e580ab3df0794cd84262608479316fe8de34d4fe446a3944d4b4d0fbaeabdd","size":1055,"data":"","first_seen":"2026-02-24T14:18:16.858586Z","last_seen":"2026-03-14T00:30:26.653295Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/if-defined-CWaLTnLW.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","size":53241,"data":"","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-06-06T21:30:11.633829Z","times_seen":639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index--0Vsjbsn.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d719c5710bacabd4becb9281151d049","sha1":"a5612982969e2192acb6c509a7e0b5f13af6e49b","sha256":"b3741f6a09d34f2f24f437a1867183694a037db7bf4c41b8746857d458a5e679","sha512":"e5e3b0915ddc7843dbb0558378b74be2b8ac5f68b58b2b23320b515288dcaeac8eb4313b4b638acc4121a6ee04d5bd30c69fd8512bacd8ba48c7482f9602c1ac","ssdeep":"3072:mewaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:nwhFHU4HNwFH7MoOWexZFHV","tlshash":"59f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","size":157556,"data":"","first_seen":"2026-02-24T14:18:16.922224Z","last_seen":"2026-03-14T00:30:26.736648Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/InputTypeNumber-CvNgktl_.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6dda88daa7516dffb53d448f427fd93c","sha1":"02c1a98a45041eb0a213ada89990c5e327fcb0e7","sha256":"a8aad3cb9a61bd4ba5a36b71d8cb9d149e8363c4e3907e28e1f5c2181501eb67","sha512":"2845a24f5d2e66d36c1480e66c499b4dbe6b5dc12c8439c078be89c82f77cc81331e840a9be131c22a4a27ca22bc38787570679551139456e970950c9a0672fb","ssdeep":"","tlshash":"0e317412f1189ffe5eb95c80b6ed4010b0524a78d5d844c1f17c7c195abcdca7a53bc5","size":1750,"data":"","first_seen":"2026-02-24T14:18:16.790991Z","last_seen":"2026-03-14T00:30:26.696288Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","size":10938,"data":"","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-06-15T21:26:04.407385Z","times_seen":26443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"172.67.73.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2363889186e23777b4b704661794f3d","sha1":"7f50ba76565cbebe1ce54ed6e30f3794fee96554","sha256":"f71def488c2fb369e417b84e2088a8c9c21a59a3d1dffe4a43f4dad196460b8c","sha512":"4fb51fd523149c9cb04134a77d41461736a1e832dbd48af01a71d47843a56fed5a4474275e8752a2460c3cd7203bbbe9fb897a4c027d81a6b446973169d3eea4","ssdeep":"12288:xF7gB5EvtEvEEvtEvud6Bg1qgn+w7b7EqGDeuPLK3c8WsIJS8oqIpCFaFIpSAJyO:xGBzd6BgJn+wT8ZI3I5Z7y+","tlshash":"688533582a6bf3849409d0d7f9373d84c59ed19aa44764d24fb24bf31bb2352eaacd03","size":1831195,"data":"","first_seen":"2025-03-04T03:23:02.060485Z","last_seen":"2026-04-13T13:13:58.719874Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index-DnKUOqup.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8c7f10d66426bad8889ee53519b2e9a","sha1":"dc309971b8ecbde75a2938cffd4d8ee1338f4e3b","sha256":"119a5d82f113f5dd9f51ab2e4a9a07c5dcc0a789a9d6b526639a390351363592","sha512":"9dceb7d6a10727ff4a25b5fc1986a02b0d82809df4eea9799238cdb0763c1cf57fbc8b6d3b6b77dddc9bf23de470ba8cc89ee1389613f12f95307f550d5118e6","ssdeep":"","tlshash":"d15143c7a082d7f8efe608e6415b10b474374e5cbd1b41d092be08874a98782e79bf4d","size":2888,"data":"","first_seen":"2026-02-24T14:18:16.970398Z","last_seen":"2026-03-14T00:30:26.809074Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/jackpot-Bj3led0W.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4780f7e64a8b8eb33f983e1697323d32","sha1":"871df83d5d466cbc809d01205102769680a05c97","sha256":"478f45dba7fae1924e912775ca8ab5093dd20755fc5ef9a35d38866e2b73698f","sha512":"5d9c81ecbddb1ccac682c859aa01eddc090b8166687678f4014a4e5f84fc1c87a3ab04ac957b0209f7bc4c88f71119267184c04194780f6dfa9c1146ce5ae555","ssdeep":"","tlshash":"d8e026dfa9c04dff92b0071a6bf51c8806241a86101e94f56e6672721405bd828f8a3d","size":345,"data":"","first_seen":"2025-03-07T07:48:09.934461Z","last_seen":"2026-06-18T19:24:29.347511Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index-D2kxYVnt.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddc5c0a44d28a7b8d51648335004f096","sha1":"b86a36ab17589e2ebe1737529ff104b9905d9418","sha256":"f171be4231676c1078fcd74f862439a54fbe94307c98e78bbd54d82250254164","sha512":"965a83e9ed27c2ee8369864445063a00df0271f382270efd5e9154e658b77fa0ace6fc660ba432529b3c931e0d61512febca667037aabfcefbb4904d3fb43eb1","ssdeep":"49152:ZOEpuf7XjIcYD8JAqvlOPcyBScOy0AXJ2PB54FiO2UJ9:teI9Fiaj","tlshash":"51c5a4bb61f620359223b0394e2fd5097e26450b5d58fda83e9c92545f8c42ca3f2fe9","size":2571023,"data":"","first_seen":"2026-02-24T14:18:17.001233Z","last_seen":"2026-02-24T23:58:46.090998Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","size":1000,"data":"","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-16T05:27:07.719585Z","times_seen":50195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/ButtonWithAction-CuHHkS5y.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c631c767a7c968bbaa39c24c1fe1d031","sha1":"3904c90eed9cc55366390f12680da5557efce93e","sha256":"7b88435e78c0dec8f0f93ade8fc987372c9f529d4dbf2b27117dad622762af68","sha512":"0937ed60f0b3e6078a75fabbfcb205ebde3c24017ef7720c758db8c94d980343dd607e97a939ba616b71a133a56f16aba85e3df837c480eaa341eeacc325f9d7","ssdeep":"","tlshash":"73d0950b1455d1fd03f576f1a117c1112615ae64f7c4c541805c55403ab155ac52ff2b","size":267,"data":"","first_seen":"2026-02-24T14:18:16.941918Z","last_seen":"2026-03-14T00:30:26.697832Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/Comm100-Bu8dbByt.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0dfbdcef43a80f50e22306be00ef9e6","sha1":"062ea378b4572ea7c546cb6c8a5fd29aabf4805e","sha256":"e05cbacd7fdd5aaac39b9e180e61302d82177ad6aa0ae712e64d0ac14001b39e","sha512":"dfc486e7a16dc11c1995c816175cf2553f3ac6f63c6f6a5f46e09d3f1a971393c91e5e4165f12ed52771bf8e8476115313a61f9dcb52ccd508b58af1bc1edd78","ssdeep":"","tlshash":"8121441b58c972b5316050e56337670133b87ad86900819102888eeabc624c3c51ffcf","size":1206,"data":"","first_seen":"2026-02-24T14:18:16.905416Z","last_seen":"2026-03-14T00:30:26.803689Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/Odometer-CiW2aCSt.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"148d62d889282f08b4e7d20be35bea48","sha1":"7127f5c4d836f81af8862f249cffae00b25c5b3e","sha256":"2dcb46aae1004dc28f252282d778d6310e71077a683c4d8694e75a4aa90803b9","sha512":"ea728ae4daa34f5d9f39bb96a01a796ef4337ef748f2ab3de7304d929d185ec96cb429889bc0f5f65e7aba71249cf200a54f925ca4c387cbe28cc03df4093376","ssdeep":"384:wCkIkVQ3W3r9JDyuhFmPHhP/TFtPpwxw1Z:LrkVQmb9JeuhKzpow1Z","tlshash":"7f6209897962723483a371e055bf4609773b6d6a3808405db27caddabe32c04d12bff5","size":15462,"data":"","first_seen":"2026-02-24T14:18:16.744615Z","last_seen":"2026-03-14T00:30:26.691288Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6909cb5dd368031952afadf5/1j9744pva","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f72b3cf283fead63feb8d768c7989d2b","sha1":"5f3a3e6faf561564ea4a81853b75a7d811a316f7","sha256":"c48c479eb86cd74ca36ddb159d34732e91ed6c3ca93c8c5c5b85ab5d817379c4","sha512":"11e021b72a126833495ceb5b2a1b032b842db9bc63a5b7f27b6738c8eeff9ad894dc05d4aa92caa27704e170173d1c599bcb532bb11b5f5839fa483bac152193","ssdeep":"","tlshash":"4c41edea5b4f1c56b22410d90dbef90ef47720f748d95892970c084272657ad2f8de38","size":2123,"data":"","first_seen":"2026-02-24T14:18:16.82817Z","last_seen":"2026-03-14T00:30:26.800917Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/___vite-browser-external_commonjs-proxy-B7VwcDRV.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7d05502d031499b1131a8bf613b677fe","sha1":"e4d9f899fbc7c14c0f2feb419b1008a27fbd7ddc","sha256":"70e9c7c57340d3ad9489809ccefab9c39c0befc2768170648b8947036646eb96","sha512":"4e5dbcf48f652ae16a384326505cd5edbc3a6c5c50524540134ae4a3d01745d2157e03071e9709f84f40507a6a083cebacca9e5538bf8f752c41e08e7639fa34","ssdeep":"","tlshash":"67c0804527d8dcb451771dc3c6159401d54c5e6e77f8f5d0bf0c8e51424258b6278f57","size":178,"data":"","first_seen":"2026-02-24T14:18:16.787946Z","last_seen":"2026-03-14T00:30:26.667652Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/Firebase-RX_gUq47.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bea24ff3a318d125e93894d0405812b5","sha1":"ba6f4bcef4314f386f1d2cc2a21770d7668a79cd","sha256":"99fef500cb5d46e88a0e1708a9ee6ac7472258d19354aec53b1400a2168dbeea","sha512":"bf5c4ad393053383e74c70ee388ca93fe575c28a76ea214cf8188f3903c17781206a50073e2518be215658820fe43c90008e565969210cacc809c7d292c3c002","ssdeep":"1536:8SF/Q/m68zUcA+sh8SH1iXBVjvDphQ+Y/R5eKpsBoXYyo3kNNrMDgyJxmDaRwzev:8w/Q/m68zUcA+sWSH1iXBVjvD3Q+Y/R2","tlshash":"6783a57d7a922a3317d189ab792f50cbb319c54c390f8394741ec0e91e3e45a45faeb0","size":83773,"data":"","first_seen":"2026-02-24T14:18:16.902866Z","last_seen":"2026-03-14T00:30:26.774987Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/useJackpot-DKjXUH4g.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"afb58ee921e1c4be886fc587035b9e33","sha1":"23b6e380adf685e274ad54bbc72940658a65de14","sha256":"09d1d476fb4ee826070640869c40b7acdea60aef58308049c6ed10b17f628169","sha512":"a6e1f6aaa5c91e667c57539d974b32898e76ec98d25ffa36e0397a01de20c08c0f57dd1ebf6875c36acdf591f56662715c693825c9ebcd402acd2979c49d8f9e","ssdeep":"","tlshash":"ff01efc6408ed5fcf18a48f141728b6e233c3f35f642d4a0d29c1b5e9394c1aec25b86","size":846,"data":"","first_seen":"2026-02-24T14:18:16.911532Z","last_seen":"2026-03-14T00:30:26.74642Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/CasinoGameDetailsTournaments-BFFya2ab.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"89649d72be704cf3249ca9222edbb990","sha1":"b83a45046119af2c5d85d147d5573ebde8918517","sha256":"aa262fe9430c29d8644af2be09cb8a39bd9b8e7ce57992d62bd03a2c76f1e8a6","sha512":"2a80d52e848edce20c35a7fc2b1cd2fe9dc825f0490aa5209cca1170fc28ed545a8d5fc9ccd9f10a3ef9316fdf132fb6179b1fe865c78b567fe0f36c3e6d18cf","ssdeep":"1536:0QaAbO3Q29cT86MoxxUQMTAIIvSUrrkYUi+4083jIrT3yYUiQ86M8kU4mp2H3Q2+:0Jy+vJCN","tlshash":"63e319d973a892f66d8ad7f890021849787d31bf3e36d1c4c1ed4dbedd1888c5829d92","size":147492,"data":"","first_seen":"2026-02-24T14:18:16.920348Z","last_seen":"2026-03-14T00:30:26.789064Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/lodash-Ddm1dqL-.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1abd4f2fdf33be952794d5e7949c86cc","sha1":"17f59f1c970fbbb98551ae3282f1f3762ec0df25","sha256":"5db2726c3d8c8d1460a832d34da738d4681e678ab6cb811de316050a18cb2cfd","sha512":"aed7df1b43c52a1bfc09cea4614a5678ab9b625c9678a47f3433c139c882dd6ed01ca664967b5e3171f59a611bb6d9fa37124c1ba60f58bc09c3849e29c5b1af","ssdeep":"3072:pcOzANJ/Y/ysfRPlb9pEh7omhBgcGE3Iq57gLtm4cqxtEIcHaCJ:plyO/pfRPlb9elgsT8LtmmRCJ","tlshash":"ab2481c835d3f0a19366247400ff044bf23dae65a88cc444e296e1ec7db996d9277ead","size":215924,"data":"","first_seen":"2026-02-24T14:18:16.963859Z","last_seen":"2026-03-14T00:30:26.729529Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/cjs-DLVaAcec.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"766b980be9596cde74f86c7cb47d832f","sha1":"512202e84cab8669a2e03dacbfc699e57456546b","sha256":"19e2abc96254bc6723d7740eb41ab0094f67a25fa2d683bd8d1842822cf99bf4","sha512":"00e8fcfdd947f0e80ecfbf77aba9cabc84e40719495dec906c25432934c28142e329e615307fca446e23b63c422575b7d7ec9e5cc76c26df263124d2d214d084","ssdeep":"384:4im/dOCh1KcgMxNVEwZ0sygHcrUbOhMXa+V7sn9QFC4EeKDhFpApoqUzNm:4iqMCh1gMxNVEU0sy4oCva+en9q7YhFS","tlshash":"1a92d68030daa4b902ea406450bfa601f2795d1eb11af048f3ebd8d57ba555f11bbf3b","size":19823,"data":"","first_seen":"2026-02-24T14:18:16.800713Z","last_seen":"2026-03-14T00:30:26.703477Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/FavoriteGamesContent-C_c3l_eg.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e365f07905f12cbe0bdad32a3058c5ed","sha1":"feccde36af0efe49873368bd9e79ef92c7a784be","sha256":"7a458785e715b274a70a0fdfae4af266553a45349b322d51c4d4870e4988aa74","sha512":"ccc3b3d93bd73fa3c5e9cbba9377c2677507a576cf1201a66e4059ce3117e5484f75d3a20348b3460906f47080164b7d0858aab2fc7278b55c6d21bd99bed7fe","ssdeep":"96:RXdKDW9HyS7zwVAaSIOQ3G2j5DLzy5OPpe0IakYrA8nL21LQ+S2L4fEp+vVNSq:RNWW9facp4Nc0ISC1JS2LKdwq","tlshash":"72c1a8899008e6edfc769dc5722e9014b039078c6b6345e0f57e4e26262d606b77bfdc","size":5872,"data":"","first_seen":"2026-02-24T14:18:16.913338Z","last_seen":"2026-03-14T00:30:26.750553Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/wc/rewards-main.umd.cjs?v=492206","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"172.67.73.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"609f8e6887e1889e72c4e96fbc3e3d39","sha1":"1a137f4ece5f1fcbdd412cbfe382d4d3af7b5fde","sha256":"c1fad91dd5a74216ffa996be3df2737e4d30239784d7e34b004b713b7a569dd3","sha512":"c991d488a6d36de33254d5ea509320fdebb96f9bbdbac34bfc624dda5d1cf3fa3665b1ec7f02b5d51affe3e534e03d4c75a70c9a3181effc79c4a88ffc4b35f5","ssdeep":"24576:5iHlTFInH0lTghey0pZOrBQL89IQn9AZNnHF9G+lTlsREuIA:MlJInH0lchey0bOrBQLAIQn90nHF9G+m","tlshash":"50157d9072567434c3b795b160be050db23c5b027806c698f2bc99ea1fd789662bbf7c","size":953208,"data":"","first_seen":"2026-02-24T14:18:16.990938Z","last_seen":"2026-03-02T21:59:07.354611Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","size":5504,"data":"","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-16T05:27:07.629039Z","times_seen":42600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/tr/","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6de2aff231a8ec89c63e046358589bf","sha1":"e2db465248bfc0d4f1145f964300725d900203c4","sha256":"34502faa132439b35d901d18200df6a58af93241d6da23b06c5373ea02cb2109","sha512":"1b333ec4a4739fda09f0d67b64e32b04ccefc6bcd48546362fad98abca8ee907b3ebdd2b465fed451d30ab1f5d2443a84ce291da7e97771264fd6eb88af06080","ssdeep":"","tlshash":"9be0265c3950bd35b25755a715b2de4c34b33028a585e85099df8c892b18d8dc82df58","size":334,"data":"","first_seen":"2026-02-24T14:18:17.002633Z","last_seen":"2026-03-14T00:30:26.84389Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-16T05:27:07.66039Z","times_seen":67098,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/loader/fasttrack-crm.js","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"172.67.73.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e62b669f80928b5dac9ece193256095","sha1":"a04e0c32df6e15dd5621258cdab16ca08361d27a","sha256":"cd306f0e4ea334dc0a9ab35e3e6c3c73a34876b8d8be27330916196042a1437d","sha512":"930f28be027cbe059bedfe820c6920d8668380c8aef844a15c140de8e907d2be6c5eb38470f0809709bf8d2d0cffd411c61a92a1fb1592503d59e24ff8350cc0","ssdeep":"192:/XKuPlMK5EbbbCUuUD7Z4ac2tMOx5YemndU25i5ObHwxaf6pedviiA:vKEiw8nbxDt4atx5Ye4ymr//A","tlshash":"e5e10e5c29f394610a93351f033be125f3b6e533221eec41b9dc8968af54667caa7d88","size":6791,"data":"","first_seen":"2026-02-12T21:09:52.600201Z","last_seen":"2026-04-14T09:08:05.84184Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.pwqbfyjubdrmatch.com/configs/d212f7f1f16e55d50593214ba05a0f99.js","fqdn":"dataspot-bucket.pwqbfyjubdrmatch.com","domain":"pwqbfyjubdrmatch.com","tld":"com"},"ip":{"addr":"185.162.230.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"introduction_type":"scriptElement","is_inline":false,"md5":"c502cf55b2a3f78e648f2bf2b2eb6582","sha1":"cd87424dc2922aaedb4d7418e581a1419e8ae5db","sha256":"24f898e9c39f054c6511010c44744db4702dcbf9c75ae5cbacbca2fd852f50bc","sha512":"ae83a469460b683155b1c51ce1309db2b9324f146a6274fd33a18d7b5e2f6807baa4c9d049ae330e03917b4bb85ddaa33122250a7e286aa541fa0fc60cf7ad97","ssdeep":"","tlshash":"0221e49664d8bf7706f01ef8e3156a48b4567f487031c849529fa89d6c214c24579f8d","size":1150,"data":"","first_seen":"2026-02-24T14:18:16.940585Z","last_seen":"2026-07-06T22:32:46.912147Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-app.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"172.67.73.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2b96460440b1358a43a511913fcc46a","sha1":"815bc669e0c05413dd3618b44e995de5200098b8","sha256":"6a86bcf9466e23eb5dd702ffae4b53f730cde0c3a160ccfff8afca7169cd7c98","sha512":"64c88dfbdb85e2b328f8e690a4829accddbc943dfe479a4210ddf28c872f5fccedd46f23c525e2653f27d6e3d24aefaac7d9500f8027c0f08ab2be0abbe58d13","ssdeep":"768:HQzjpSkGROiRfEu8T3eSwKo2hWN0Kh4yPaw6ANGp2u+A47WFfVVoO4kC:wHpSbROiVJ88hawKV+A47OVo2C","tlshash":"4773b88db1d2badd4de32021535b3604f23b1974542bd484f7acedd52a28b0be227b6d","size":75107,"data":"","first_seen":"2026-02-12T21:09:52.719393Z","last_seen":"2026-04-14T09:08:05.884309Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/firebase-messaging-sw.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44b92a7d10cb0970ced5798c2eb1b8ac","sha1":"819f60615624f025d1256efc408d8e576a909c7b","sha256":"a87215bfd90d96fb55335ce2b2411f38074588149c9e896505cb10b250e17e1e","sha512":"75c55da9e8afbd96b6219292c91fb88e01c15d20bafc974028763227220aa042f4b761895d44b0394baae53c225e9b0c109d2eca333aad6b382951a60448e8fe","ssdeep":"","tlshash":"5121cb124be2f8231e4104c7679f32186e290d2507b0f1de61bf56b86b0a57b206bbc5","size":1125,"data":"","first_seen":"2025-12-24T22:39:16.149326Z","last_seen":"2026-06-17T13:25:54.195615Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0beffdc96a1a1b35b5ce2759d6d1d51a","sha1":"8d9d42c92a1d18382b66ee353d3b81b8641ced00","sha256":"e27dcd41e84265874a28c43fa5780e5ddabc8cae4fa0d010d0ca18360e704389","sha512":"6c5f688f184fa65416108e0f6af9947e741b70ccce5053b318e8ed64858d9ccd6e6b2f905103bb3871e540ecfb7a85efb0503c539bb4545d6975c34aa58dc090","ssdeep":"","tlshash":"7f4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78849815afb6","size":2306,"data":"","first_seen":"2026-02-19T03:13:10.681687Z","last_seen":"2026-06-15T21:26:04.412918Z","times_seen":11137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/tr-CoUPPbe1.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7904bd6023589e24faa32d1e3809a4d4","sha1":"ee287eab3a4a9bf35c261ebb12679ecf6866b2a4","sha256":"86188ee225a389430fdbeed8517fd4744290b376f5b4dc20ab757cb5cf137063","sha512":"c9f9f55d4dc662c740472052458063aef9f11ff00fb185d8cbbc6f01577caf5afcb7ef54a4d7363b42f5efa0e8c2eead2c4d23690bdbc856a8f986c587e9e469","ssdeep":"","tlshash":"cd31c68aa92fa6738f5c044b9c1c2744594c1b50f59dcd306fe8e4912bb0dbd01af3b4","size":1755,"data":"","first_seen":"2026-02-24T14:18:16.746924Z","last_seen":"2026-03-14T00:30:26.709187Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index-BCvg75Ns.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"80684ac427b39b57c54532656918cad7","sha1":"b465ae91c660775fa362fc898ecfa7d48bdf1654","sha256":"e68739d973934f56849354660479710ec2a44e6f31cc44e06565a0d3ba9ac168","sha512":"50b2d184a947d9a71d8f5c654d514919f46dbe4dba4799665f37d37df781bb720a838e9e5120b66bcf5f23c0170f3818f159a5b4b1ca6782455a25a2d02b23a0","ssdeep":"384:aIMci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJ9:aIMci408FFnJrIjE3D/OY2E0xqpc1NKb","tlshash":"938209d0e2b4f7a642e86add80392074f2218c2c347dd0f1b6b6ede970664ca856dd37","size":18026,"data":"","first_seen":"2026-02-24T14:18:16.772008Z","last_seen":"2026-03-14T00:30:26.711454Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index-CJ9HkosN.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b224cc25c350a7d3c8fa0937d6d0d93c","sha1":"55ca754d93ca4a04879d5e3ff8ba2902a0c33c54","sha256":"ec75cb08b7d2ab4c8b3ba53cad812af91e70fbbe95ba3c4cb7afc0bad60d565d","sha512":"3e6a818d2d309344518c2a9bfcd1fd2e4432d21e7aef9e93fa0de3aeffcfc30a190d0b8007466553d5bafc655b9737b7bb9de9bd13dc6c20b4c7a8c7e3ce3b66","ssdeep":"6144:efEL9y0h4R78o8e4YmIALoh6wj9Sd51jjVvFaTIRcDGRD6OL:ecJy0h4R78o8e4Yf/j9e5xaTIFROI","tlshash":"86240ac4b274b0b556e59494502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","size":221127,"data":"","first_seen":"2026-02-24T14:18:16.805349Z","last_seen":"2026-03-14T00:30:26.730681Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/events-CV3ChliB.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c8e97e9b3c7fbb0ae28e6081857c57ea","sha1":"2f2ab98679bfa34936faed846a6562a347f7dd62","sha256":"fcf378050c8338ea0414b258a3ce61043408576603be6f96232c70abc80aac89","sha512":"15d0b5abcd0c0f390a71f78ae63f9dc761df5fa5b9117e0e4edfb23b6463535f4bfcc98dac422b03e695182e145839ed025125f909ed7ea2ac47ac29bbd06e95","ssdeep":"96:rd9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:r3IM2sWMtBq6n3PzH","tlshash":"45c144ccb38574b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9e4126b78","size":6141,"data":"","first_seen":"2026-02-24T14:18:16.763465Z","last_seen":"2026-03-14T00:30:26.778085Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77424425bd755d02077922d40a96c207","sha1":"9702eba70ac4506031d55a8c9cf6732a66853b2b","sha256":"1128f463d0038310bb65c71ee2bd50f52e40dd9dfc0489e127f3912a1aa728ce","sha512":"2ac723d6ab08dc1cf45141cc44966d9b0f01c892511f40148d785de61ac084e014799555bb3b574f6f8b78e9410df8c112fd437eafe0aa747babdc52b451d1a7","ssdeep":"96:zNC9Hqt7pEma7hY/rcKaJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYcLRIvgx43nVY","tlshash":"13b1859ef247b456c156225150ef3b1df33a281ca61ccdc8a66565f218784cba077b39","size":5261,"data":"","first_seen":"2026-02-19T03:13:10.646706Z","last_seen":"2026-06-15T21:26:04.407976Z","times_seen":8491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/FavoriteGamesButton-Gc2t0UFU.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1afc8809fb5e9f5b815b42e2d8108480","sha1":"e7f578e703d58f7e06b89d41e629dfed29182f1c","sha256":"c3a2ee34677ec82d22971a0603bfc974bc7e1c5ff508a87671f65fdc2a0ba619","sha512":"838fd81c83fabd10f84108a0cb2ea62f40814c55066d7d180bb9e30944049f3e27671ea309a6d31cfa1e49327c1609cc45ed95aeb2f93c7ef5ae28cd1a4684e6","ssdeep":"","tlshash":"e9e0a3066049e1fe2b621ae52507c1142426a57cff98d19040d919953db1457c91fd6f","size":427,"data":"","first_seen":"2026-02-24T14:18:16.824454Z","last_seen":"2026-03-14T00:30:26.837513Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/NotificationsButton-o65atfPs.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08a269f7193f421a33016c6eba572ece","sha1":"f98e5c0bc487c3f03fdfbb4bd993b50cac6c0337","sha256":"8f46eb3bd1462cd78841335d031abc9192a7a01cbef28558bf055195edb72e0d","sha512":"c5f0d55155d264bbb76d3f2f97e7fe639bc0a05f045a962d76c6f6b0a76baae85b79a4739b5ee70821afa38188cf91a0ee243ff41500eb16073ed9314298b496","ssdeep":"","tlshash":"8ff02646a555d4741b920771633b90152437d628fe03444004fe1c9922b4029881f94f","size":558,"data":"","first_seen":"2026-02-24T14:18:16.845246Z","last_seen":"2026-03-14T00:30:26.712985Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/SystemBetCalculator-BNl9_0zo.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"53ba20b5dc2c2fea70b3198d93be94b3","sha1":"47c830e86d62a21da199d90942fef4051a5faa78","sha256":"edf5fb95b014e5581f13cdf264be1719215b17c29567a0b3557c13311c139b78","sha512":"3b304ece4642a40e03c06aecd0bd154e00d281a0b26ad7de02de929197aa66cb3c2a7c54e1721887b3c29349d3995f151daf219d7c404f7e1c0384eb0550e7c1","ssdeep":"96:DK/I9MQWprKbWL2+NjIaKc+iH5QmfP+hA1brl:DKbQ5bWNNjZKEZ911brl","tlshash":"c9a13100b550ebfdadba1ac2ad5e403c71191b58d22922d1b1fc6d31ea3459137a3fbe","size":4807,"data":"","first_seen":"2026-02-24T14:18:16.820081Z","last_seen":"2026-03-14T00:30:26.815661Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/PromotedProductsWidget-BQqw5cqG.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8be677c88a0f6f8b371a2bef29c2c822","sha1":"decebf87286ee5814aaea2e28e762406943fc9d6","sha256":"298cd0bcf516e543afb74916f85aa3adbc521e4498aeefbfe1cedeab998cf1c5","sha512":"a5daac026612d66474c6cf031423dc920d0aa0408e5a49bb731ab62b8ea647e8672135073a42889ac77019eeb6154c348a8999416fb79b6e5ba52783ab4a2875","ssdeep":"","tlshash":"21310082d93c927ee27a04fc125aa0c939067d28dde2c4b480a46d17917d819ff45eec","size":1531,"data":"","first_seen":"2026-02-24T14:18:16.760208Z","last_seen":"2026-03-14T00:30:26.804421Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/VerticationNavigationListGroupItem-BFd5_K1-.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b3fa38e36f93de3948b2cea22c5f8c3f","sha1":"ffbc524fc5703948bc71d74b08c864db053df9ec","sha256":"2e2afc1d5b3f7dc050047f129e3c3a74fa62506afd2d8a7164128efa427d3131","sha512":"9f84e930ea6c03305475718a24df2b7e4640c57d1056b692ebe37efb2ae54031d7d02373fc7f939acbdfeaecd4c1c772e047155b3105d26dc70a635de23417d5","ssdeep":"","tlshash":"5bf00202d490af7cb83a54ce956e8080f9780d70eba0c4b191ed232315365e6730af4e","size":637,"data":"","first_seen":"2026-02-24T14:18:16.742387Z","last_seen":"2026-03-14T00:30:26.671313Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/walletConnect-CiycSUBb.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","size":1998,"data":"","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-06-06T21:30:11.623634Z","times_seen":1659,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/LiveChatAdviser-u-RpAaJi.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2beddf65e1a86655ac4778cae74d183","sha1":"358304aca6309a758f5f410865a6f3cec2ea40e7","sha256":"0acc27d5a07e3c22bde012cf7d28e683ccff5a3ef76aeec4a8f4ed3cfd248027","sha512":"62c7484c2b340ead12a990702cf311ea533f2f2fb2ac023721419aacd3fe1e6ef22b3eafb7f21520b0cae41a4487d3972071342ac1f3bf09266547fb68344d0b","ssdeep":"","tlshash":"9c11e3e5f086b7fd567a188ac76a2443300a4ea4e17d0d76507e19505e6ce06d249ed4","size":862,"data":"","first_seen":"2026-02-24T14:18:16.947873Z","last_seen":"2026-03-14T00:30:26.73776Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/withPanelButton-NT41boAQ.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7b3692a2bc654f127ee28ae67bcb86e3","sha1":"c816fce5fa99f4792f594ba2d04e3f79dffb58da","sha256":"e3dbd067b82a5c53e151c8ec4ed9a2f5dc0ef79c54c705558a1dc82a926a0844","sha512":"9a255fe6d47146854aefcb1f0fd3e98ad0f11f9201bf6014a823ea2669931174c34b2f2f7b562a44752f4d2e898748fc3e8999f7ff5bbdd1683383db8bc9b55a","ssdeep":"","tlshash":"1c11f0e5f580a9b1e0c81088577b2db6719a32c9dce1159021b6c8da5fe80489a1e9af","size":1089,"data":"","first_seen":"2026-02-24T14:18:16.857205Z","last_seen":"2026-03-14T00:30:26.668493Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/AppSettingsButton-BANHATFV.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b671422d29097c7d76891530fb27b9bd","sha1":"d752f1a8b02337bce628fd1b80b7c21665871ca2","sha256":"648a6a80b5a1013a983db2d23e885e890f6699abf8262d29419e3b00939eec7c","sha512":"42dcbc325a4424ac326ef15495ff6f933d3d45045d8e445361d775410a8873dfac377c7c46b7cca00955870b8290aa6ffaff894defe5f76aada838474f00a61d","ssdeep":"","tlshash":"59e068875095d3fe17f52ae2c00b82056616ad78d785990240fca1917af4192d15ea2b","size":385,"data":"","first_seen":"2026-02-24T14:18:16.814734Z","last_seen":"2026-03-14T00:30:26.697069Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/CompetitionDetailsGame-BpCnBwyV.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8ecf6eba82b1d427c9369097a2788c23","sha1":"3f5edba702e981ada186fa1427b9e90e1a4ffcfd","sha256":"f421aaeca2ef184f55db524d3dccb433ba4658b26438fee665ac68a322ca3965","sha512":"cc24ea01fa7204baf75717c516a89efd9aa46daae5ba1e3336188cccc48335e449577dbd84bbe4f1d9c66d4deeab1255178fb380bf20b413e693b8929f77f506","ssdeep":"","tlshash":"57e02b964410af7863bfc1dfb2d052859670808c4b43cbe9b16c9b9c43c609d23057a2","size":428,"data":"","first_seen":"2026-02-24T14:18:16.980886Z","last_seen":"2026-03-14T00:30:26.657503Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-16T05:27:07.732942Z","times_seen":93598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-16T05:27:07.803694Z","times_seen":93626,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/tr/","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57c067cf30e5040749721fd2d250a4ef","sha1":"ee91c8c5c6946fbbeff27fe80586a47e94c111f0","sha256":"77f6244000158759239895843f944edf07f79f0424df14bec7fa7a180b4aba2d","sha512":"0a6de812e66d4fe9e0a02e2096c714deac73f95b86e62cf9a7eff08bfe0514da87d088b1f3b7b59a77a2e63f389f9ea59e599fe6482ef46ab42863befa1b66a1","ssdeep":"","tlshash":"f5e061e778171879759f05bd67b59014358321096449c922fdfdd4241f60697cc5ec9c","size":427,"data":"","first_seen":"2025-08-25T06:03:31.147302Z","last_seen":"2026-03-14T00:30:26.854597Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","size":53530,"data":"","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-06-15T21:26:04.427415Z","times_seen":34009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/BetslipButton-BLwQXbO9.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94c0b9a41e53bfc380ed72c582bb8567","sha1":"364f683d5be662a083e4be546c45de4d7e7a148b","sha256":"3e478388e180c74ecb10e29cac8c8dd11606a18d0e9d980dd191fa058b8284ab","sha512":"d04c0ac4b418f6417837859396c4519262907a0b0fa23b0930d8a53b1273a07f1eab278f1c72b9c3d8a76c92be9006f3d79b7607a9629d376f60284e4802602a","ssdeep":"","tlshash":"68e0f1464948c2fe0b661dd621028202342296bcb345e68180fa6c527eb4556c82fe2f","size":418,"data":"","first_seen":"2026-02-24T14:18:16.816242Z","last_seen":"2026-03-14T00:30:26.679546Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/Home-29FquIl4.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4da4894b5ffa5e8a7d9934b3d3859d1","sha1":"1e0d3b033c1c47b8e788cf1b8a8aa4fbf5855bb0","sha256":"0bc43ade495175e63835fef806c9cf79b003b62f9e08815851bf4f46d7ccc18e","sha512":"e12f56fa8bd4682b72b78effd7946c89a4eab825e9b73f7f433f6758eab22901355d90a5daf9bb7c1a71e838aeac5752d805bda8789455d7546d5a4a9284d306","ssdeep":"","tlshash":"f0f0475da191f87c529b1580f2187c6950692e54f7784140431f05ad477118d442fc0d","size":592,"data":"","first_seen":"2026-02-24T14:18:16.773672Z","last_seen":"2026-03-14T00:30:26.788399Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/NeedToLogin-CJzXWk_i.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"37c41e9cde1f88038c061a6893135848","sha1":"ec60322412dee43921a59f8a0037ac92616b6ae3","sha256":"352a4692e27722c09e14c91395695242715e7b030a8f7550c9e9462bed35a75b","sha512":"380cbb81bbad09fc48d7b6954b2904552cdbfdb6e78eae666d8fa57b119197257fd345c91ebdee3c5914142235c2be596cd06b01009a75727ea1ed17b18f446d","ssdeep":"","tlshash":"97e0a35ef4a5dafd566d0cd4eb55682230160da4f7768d98405c44444ab4081130f6dc","size":409,"data":"","first_seen":"2026-02-24T14:18:16.973617Z","last_seen":"2026-03-14T00:30:26.812031Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/WagmiConf-DQswithC.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44d86b1af3aa92c31b954cc119808efd","sha1":"23adc1fdd6bce9f8c0481c71eb21a3e41288fd41","sha256":"f9c20a6e90ec8dc1dbef103ed21fc6b0d537192712e7bf26872ac4763b094a16","sha512":"aeec27c539b5c81611259a359a29a8706e2825957ba52f4a9d4329425b0c17bd064d6f94afbff6a4caaffb58d06504a0fe97d6be855fa485b630c62a172c6100","ssdeep":"1536:r8AqCpPuCdwD7ZajZlO1jMw3AIxkQXo7k8UhVnScp7XTF3waG00GYBl+LtqMEE8v:HqCo/xVXo7NU3q+LrEEnG1sRXon","tlshash":"3aa34ad07196b46103a74ae008bf440bf139ac34200e565cf26decde79b96aa9277f7d","size":100711,"data":"","first_seen":"2026-02-24T14:18:16.768194Z","last_seen":"2026-03-14T00:30:26.673113Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/useOpenLiveChat-BKVG1rjM.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"61164bc70d82e24cb762b99232381835","sha1":"e8596b55e9c6fbdb38ccf855bc441d06fac11ac9","sha256":"32df63376b393a20c821f6400052db2a565e4b94a4931acab40c15e2663d34d4","sha512":"72b28c1aaa37bc4a1b407746a6b09561f5648c9e37e7790a954d00836ddceaa9941c58cfc7f7220e121e7b0a35313bd749fe47dbfd6a551fda5d1a8d7475daec","ssdeep":"","tlshash":"a2f0e18e45909e7cc0c447d1111ba5f456392ba4344ec842b53e1ccd2434c4546bd847","size":567,"data":"","first_seen":"2026-02-24T14:18:16.930525Z","last_seen":"2026-03-14T00:30:26.738678Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/SportCompetition-CueabCwd.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"511add06ae585df1bdd24d6cd9b78680","sha1":"b1ab2628a37282613e3e94f1001caa20488d8476","sha256":"fa10c9af8aa53f3e27b9c0e61b5ca5be91b4374c117574749529460ba5022a1f","sha512":"8e426ca5f6ed650731200ee00647f9be51d7c4db68dec8200130aae4950b89f75e0b266948d735b37482d57af18db7dd5d0c129beb4ba93a4d3dc196f7342313","ssdeep":"","tlshash":"e711404be849a9b47d6708ef231a40a9e530446eefc90ac0c14dc7462b7907bb35ef18","size":942,"data":"","first_seen":"2026-02-24T14:18:16.915791Z","last_seen":"2026-03-14T00:30:26.751207Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/tr/","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f61c1345c11b7b6f6492871910310b20","sha1":"b609d8b42f6034425d43cfb863489ee525a6d13f","sha256":"a3bf74afd096384c53fe470228347c5afcfad34a5e777ae9acd4741bbd2c1d6b","sha512":"4fb913af364a73a9ef35d5d65ac235b065d9dcf3145e5b4e354b300c1507df33b5958a0405126c472b335602a6f18b8e0f6a1884b664981efa8272b30f728687","ssdeep":"","tlshash":"99319cd9a6ab24b20533706a538ba4283a3464272046ec043a1e91d84fdd22d41eafef","size":1692,"data":"","first_seen":"2025-08-25T06:03:31.14192Z","last_seen":"2026-03-14T00:30:26.85279Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/tr/","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6e58ff6865fddfb80ff11f7140879b7","sha1":"0aa33867c2c8d48bd09ce0035022378561776dd4","sha256":"4b09a3786d25de2aac1c9f82f10dcc6bc0c814da16b419cdce47aa6ebaf927ce","sha512":"17434f537633f7724515199295c12ad0f363bea4d0c446a2e53f42658b869bb4e1e9666fac38c3dbba155d81a417460ed79187e79deac1e4f927f337d2a2ea14","ssdeep":"","tlshash":"3821c05e72fb60710037916c87cf551a6260142b2086de253e0c41a11feef6d21d3fae","size":1231,"data":"","first_seen":"2025-07-25T10:16:19.699934Z","last_seen":"2026-03-14T00:30:26.85339Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87f83aeea14051d9edd97ec3dd41fa0e","sha1":"8649c359a630d1c55eb268ff051d5a284ef7587e","sha256":"38a072ee28e39fadd2153244a3f0a48df473ce7d8dfe16e2f2fcbe5d9cd0bc6f","sha512":"c56e03220951ba738fa2f29bec6d02b1de5ca769f1f41c39ff3f12334b16d0a82db78487c4e4cfcd8fdfaddf4af6b923c725af335346028224efa849bc140eca","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCrGN//h6LiJq:SzP2DZSLi8","tlshash":"37822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","size":18392,"data":"","first_seen":"2026-02-19T03:13:10.613764Z","last_seen":"2026-06-15T21:26:04.434078Z","times_seen":8479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79b4aa69d45c4b43f0b31fd971b1bbdd","sha1":"77122463966366aaa969b55f404af7903b9d8f86","sha256":"34b9a3ffbb7a87b04fe51abdb665588b82d1e5fba4cad27b6d6518228d20c2b5","sha512":"6bc666c4e89838ba9d62ccba15b642154cb69eb86ac22585e64e11eb0bca2ebc710c3c5cf8993a99aa85035e1ae44d566601f6b7649e7d92fa3d72a2f53f252f","ssdeep":"1536:BigMTWFu196wufn32jGDdgaOFUWbaGlDluK1MFY7dZPkx3u4V5pfYMrlSf:4nmuTilGhmPx3u4V5pPrlSf","tlshash":"36a3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","size":106023,"data":"","first_seen":"2026-02-19T03:13:10.618029Z","last_seen":"2026-06-15T21:26:04.428904Z","times_seen":8427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index.es-CSWu3UeV.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7da81e609f3dc33037e6b059f273873","sha1":"fe973bdf78b2c85b6a415add6b2c2cc220017bc2","sha256":"e667dfa1b572dae551aca51c4e630d9a2a8616ea7b3e56fabb733e2cfbc36324","sha512":"99367a98b8230fdb0fac493b54934a5bb781d2f413b5f85e52d530e939e77056a6897edd2912700c156b906e3a76afa526ee0e792ee0428539790d90f253c988","ssdeep":"3072:3Yb97d3bblKS+D67LBmBS6tSx6XSKPO6DProVcSrpHsMfp0DlirNY6Uco:3Yh7VbliD67kw6McXScfrMx/rNY6Uco","tlshash":"5e54f98472a7f47543d665a8943b1642f23a5c64700c902cf6acfcdebdac4499a3bf78","size":294785,"data":"","first_seen":"2026-02-24T14:18:16.90864Z","last_seen":"2026-03-14T00:30:26.681681Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ac4b41bfa3079e73da08ba512cca2e3","sha1":"28236a6e21a500f8eb1fc0804ed1553f4b7fdcae","sha256":"b6ca684b4ef298f79d931ea40f8c3b597bd7e8d892a21e7cfc756cb3215792eb","sha512":"8fc4f8a4242748771f8a9220744ad1a1b501fa381ccbea978dc7062afee4c8788f2ad79a74572020146ce13610abcdba43f005cc36a2a455eb2d6a226a689f24","ssdeep":"384:UJw/U5YK8Hx9KJsThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJsThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"9052c6a7b2a4782d42379712308f3205f33b7d45b215da19f36edcea4aa84c16056f3e","size":14213,"data":"","first_seen":"2026-02-19T03:13:10.683375Z","last_seen":"2026-06-15T21:26:04.416628Z","times_seen":7904,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/tr/","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"623ac495c3c90f7e2883c8d095a8f2f5","sha1":"f17800a4267ddfed8b9d0e8d5c52a77fac4e6f4b","sha256":"aa8233820a13731bef7b97809acd06e5de0ef7b7facf62e547ae182946f83ae6","sha512":"f271f0fe3d7536b60a7f7ee23c05bfe59f5892687ad57cf7da13b12ef5339cbbc35cb46be8b982c839eb3fdfbe462e2a31e47d9118d0c22a8c540c8cfb7990ae","ssdeep":"","tlshash":"69f0e9dd95f12031013bf82c651f41163db140776084ed06382cdbe00fe566492aadaf","size":500,"data":"","first_seen":"2025-07-25T10:16:19.706571Z","last_seen":"2026-03-14T00:30:26.854044Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cms.21btcoservice.com/content/images/casino/icon2/eaae847522af752e884a744ddbe6682b_casinoGameIcon2.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:40.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /content/images/casino/icon2/eaae847522af752e884a744ddbe6682b_casinoGameIcon2.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"172.67.73.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: BjgPl3QA5IK1JuZYhXx185roQriMTjA2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bS%2BGU6HvWTcGbUr893hG%2BgOBI%2F4KCFURzYY2QElVj%2FQUfDBYYNYnfF5YLwAzzTZP9YmCD%2BStAlKfxBdOsv7Mbg%2BZBbzPl3Ze1en7ABSGkoH9%2FSOOnYFRdBPhAwT%2BTQ%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 9803a30a87f1ec1047cb2b8ad5ecc43e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: bzqjIu9XqJ_-0QH-xl1NsT6Wgp0aZFr7RNb-MZbgqIfN2Yl9sSTC2w==\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"a2363889186e23777b4b704661794f3d\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f964b7999c8cb-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1831195,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (36723)","md5":"c466e082c7495db98ee1686d003d2484","sha1":"ca5c126c2d6e71c98050cceea0e3ff60d908178d","sha256":"36ae79bf11f0dfe815aa2e68937b7aba68950aa0b3d80ed783ce3aed9163058b","sha512":"7da32c99dedf46fd8f78fd0dd618f9d9987d5b831eaa3d6f6066cd8d6f1b4a5f47557c4826bdd27859bd5974202cbe9af75ef124c5a76117d9ab8b37d5e266a8","ssdeep":"12288:xF7gB5EvtEvEEvtEvud6Bg1qgn+w7b7EqGDeuPLK3c8WsIJS8oqIpCFaFIpSAJya:xGBzd6BgJn+wT8ZI3I5Z7yq","tlshash":"16358288295ef7500957e0e7e03b2d08d22ec635f847a4409f7297b36ab2357e3ade15","first_seen":"2025-09-20T10:36:49.604845Z","last_seen":"2026-04-14T09:08:05.833697Z","times_seen":46,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":1,"connect":11,"send":0,"wait":145,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/content/images/casino/icon2/02e5e84813e2f68cdffdef4d321b4b98_casinoGameIcon2.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:40.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /content/images/casino/icon2/02e5e84813e2f68cdffdef4d321b4b98_casinoGameIcon2.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/translations/tur.json?v=1771942500000","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /translations/tur.json?v=1771942500000 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942651095; twk_idm_key=FiSCOP7izUupWbsIWZHDo\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: application/json\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120\r\nlast-modified: Mon, 07 Jul 2025 05:58:32 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DH2ID5RvP01TyPVqdbrXOJWuDTTVkBH9OUvWlogboF%2FI201IEXymTnHoezYQTzDTCI7DlEissdZ9lHRYIRgTGP0Zu%2FuqVqUi5QIUk%2Bfm7YWTbls%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9642787f8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92531,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (63460), with no line terminators","md5":"83ae4f1132abf35b343da314f2df33c2","sha1":"b8ea9206c3cd8c23ad0805f5665da5bc89e40125","sha256":"9ec8315728c24b1c0af6bcf98f85618edb555387f8f89801bc834b23abb69026","sha512":"832024c2ec27bb33a8512ea7141e6e1faae228e4dedad33e834ed4e1bed962d41603b58be21c55530b92ab57f7714f99b76c8d8d57219f3f4903c0f5f0e7c432","ssdeep":"1536:mQJqN0/Ji85f9BZlqJrctYfqHS4pm03OVgo2MHNimPPqnaUfRS4MQYxmHyKjscR1:pJqN0/JVmJrctYfcpm03OVgo2MHX3q9Z","tlshash":"e6934b05186a3cfd977107ce659e9ea2a0fa0183c190e526feadd63a13dc767916fc0c","first_seen":"2026-02-24T14:18:16.721627Z","last_seen":"2026-03-14T00:30:26.833052Z","times_seen":7,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/casino/getGames?partner_id=751\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026category=406\u0026limit=4","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /casino/getGames?partner_id=751\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026category=406\u0026limit=4 HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: max-age=600\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1000\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response\r\naccess-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=IC4BexemSzJCLWBzRLDkhetSSTVw8QxoZmBlTQ2zUdc-1771942653.9867892-1.0.1.1-tePRyKM.4KhWkWHTTyVGkXn4dm1l7ASCrkIe9NrL9UKbo9CMarhVeNRUAu1iRnR5ExCZU4YgQGKdKZk3riYLUrgMxPn_NTxOKRpADqp7uZbfoVr9mt.RWv8zXIO9LiQA; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=msiPLI%2FqlNZfsyUy%2BgqZIRaIuV2GOYPnB%2F9D00A1ZSN6fDp4RZkhbq22tzsZzA4UYadV1vGuCvFwAQ7Hx%2BEWgYTw0vZ9pfGtjlgwKTaiiydSLrRP3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96536ce61a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6983,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9633a377e98d06a5c678642ed48b3b80","sha1":"b1d1b95864a1bf9d1d7bb0cfe6d19b1e243b5c0c","sha256":"4291c3ffd56479939201c431f423bdeaeecbfad4aeccb8bab33e3d0d4cb06825","sha512":"ee91ea6a3df8797e30f31e8fde616286b4b2e90b8c870aa06ddf617d680a7cb8cef77057e8cdb5ccf5574d6b1de65dbe18476195b4674d1b3bebdb3d5b9387fb","ssdeep":"192:I5V5LEiLFf2Y+Vld5LfifgRtf89vYGv5LecWz91WeAWmad5LZeZcgGZ1/hni:65Id5z4MW5I2KF5lCka","tlshash":"a5e133275f48fae61b261c8128163d0ed8bd5fd799116ec14ebee8fa02f11c14a712e7","first_seen":"2026-02-24T14:18:16.72426Z","last_seen":"2026-02-24T23:58:46.030479Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6062,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6062,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/api/public/v1/tur/partners/751/notifications/whats_new?platform=1\u0026country=NO","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/notifications/whats_new?platform=1\u0026country=NO HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Key-Case: camel\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncache-control: no-cache\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1000\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response\r\naccess-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=xvRcXG3OsB3n9eZdMhSspXHFnQaVkxTmS9sdrcKpxzk-1771942654.1704152-1.0.1.1-26gOa_DOQfjGzN7Iw9sv3eVDFhUkiJsumFm5GScLHTEVHnhSGQz5XPIGwSZJQja8lnXqm_kfoILRAXPQhT7b.Xk7FotN5OpiOhVPOj8A0MUeBvJrAKZf6VgFt0U5.N1L; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6U85fhVNFVR2gRkoeYSOMi1XFqnHLSz7fYQa07QxFA7MxFzsp7zikK8%2F%2BUPj6HqWMmcJsO9WWNeAl5YdmtT3Y2oayOeDe70RR2Enlcej0kbc6rbtw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96548bc31a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1780,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d3c54fbb58bdbc049cdb0511ebe72bfe","sha1":"952c530fa5e60d5e6f4092dca93e957ff475f0e4","sha256":"e937a0e69c3616d29c6b6d653f7b58c1dedced93f6c31b8c4c7edc0aa70af0e9","sha512":"dc0267bfc82cc2bb6c9c397203c45bf5c4515432a8fcd8f0c50bedaf985707d1c2ad0fa8bfc057e3e25bd40b82e41fc3d6b57ffa4ebfa26699345edfcb66571d","ssdeep":"","tlshash":"b8315335657d4f4c8f81178a9487f12ea40f035aec54fa34d658cb6690686b8d5331e9","first_seen":"2025-12-24T22:39:16.028828Z","last_seen":"2026-05-04T14:33:03.573483Z","times_seen":59,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index.Cj5ks_WG.css","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:28.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/index.Cj5ks_WG.css HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:28 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:55:56 GMT\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oCqnIZVqrVox8MQhlQ96cWbr096PyD2KSOfcNA810vYMSWI%2FFJHxAogtEJHYWanRZXTjmWMdOB6ILUtHK%2FY4xLmaNRtvEg5m4mupvAeooJSDHEk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96303fa98a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1333191,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (62128), with no line terminators","md5":"68645a3184f64b2d06cc8d48c5c21e47","sha1":"ec0209e1e9af19e18fef4ebd786391b8ec45851f","sha256":"cb96de3d3215732dc179e5ffeeb0d744d73f744754a7de5db09963ea8e3227e3","sha512":"7f6bcf60cfab86fb5d54c97cc35f8bb93ab12ea1acee1038f21ebcb5eb020390d05d8a02b70fc39c075ac7351207757b81e2b52154e1226e2b8004ca6b96f8a5","ssdeep":"24576:7i/L6Zt4cMHbOo7kVcc8JH9ldtQBXQVSegVgwIWEl:G/L6Zt4cMHbOo7kVcc8JH9ldtQBXQVS0","tlshash":"2825a450855816e8773fe0ad47d933c8a804e168ce513fbff8e9e66ca1da5401263f6b","first_seen":"2026-02-24T14:18:16.730376Z","last_seen":"2026-03-14T00:30:26.822193Z","times_seen":6,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-4fe9d5dd.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"8249fafc9a9fbe0f75d4bef0aae2305a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 472432\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f964cea569cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-16T05:27:07.719585Z","times_seen":50195,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/content_751_f147442680a161727ec98fdc690ab9df.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_f147442680a161727ec98fdc690ab9df.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 78632\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jan 2024 11:52:34 GMT\r\npriority: u=4,i=?0\r\netag: \"65969c02-13328\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=qneQS7AZ4jdmdqK.wC9Eb99ULEI26Xhv9oHorMiuBP8-1771942654.322776-1.0.1.1-4wSdRAmgdPt2TkA8J1DvVDfLBW4C5T0KWMVjMxAanJ1FHC.uX_Q6j.aiusXc7MUlnXlbSGABxPDEk8D0aPb6ti3QSfGrPD6VGzkVfXl6s.qf.SnB0iXKdtKDOqY1PyBk; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=omN38Cc3AiikeF0fVxH1sOBdVATQYpFV7FWjfVzvgSZtgTDA0ktTSP0A6fxs6m7V0m92B80yVsLcQaRpDSne6%2B%2FGxR%2FQcWJCMpmVy%2B5YvC4Uk9E5Eg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f96558fa976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78632,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x738, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fa7be2a34791172f3679e7c1fa2eda40","sha1":"5a779357d980afdda65b7d902969662af7854e9d","sha256":"19b845618375fbf28ed9d78764b3dc10a876969671777032402ef260b969fe5a","sha512":"614c9d4041f6e018a695cfc8c1ea525ca5878307876b5cf61f663f5bfbe4ef83cd141353196a25c35a771d1487d3955e6101cde6e7f4d4be38bd02e70b2ed6bd","ssdeep":"1536:7aPHGioBrqIL0sOnDybTV4zB2x8zH0bKDMNmy5vcqZbZWjl/ICIRZ3t4:uOi+OnubTkhzUbKo0sZbalQCS+","tlshash":"80730246a5541115eb5c46e86833e02ba7bb7453cb0270cd93076abe7aec4ff2b4c647","first_seen":"2026-02-24T14:18:16.733481Z","last_seen":"2026-06-03T04:20:31.910264Z","times_seen":7,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:30.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:30 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7559\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f963a69a2a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-16T05:27:07.66039Z","times_seen":67098,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/payment_751_8f347007a03d8e8dc6bf1f2450318563.png","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/payment_751_8f347007a03d8e8dc6bf1f2450318563.png HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=8ghWret2frzKs5rsqIVb5H3tva9p.34i2AZBHDdeaek-1771942652.2826152-1.0.1.1-hB4fexjq8Q5cdL86ZS8pHFOiQ9Ch62MlzZbkEGJ8Y20OMStiYY_rmEQ5GD7zf2IoQqpFTeregYYfkAFtmQNvyF8v2wU0IioQDvj.nWcYIUjMwJYDskOUBUCL1CqSu9NZ; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zi2K3%2BWrlIa86A5n8ZauKCJl%2FSnWDfyQXMx6jDG4IUeL4jFnRzxeR1co2Wybx7hYfsuR4IcUwrQVfpyBicOH7jGG%2FeGO26O6WIv8uLOeuFTXnLJOpg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9648c9920daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/payment_17866_751_064da3d9b2e4bbfed5eb6f11b7b351d8.png","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/payment_17866_751_064da3d9b2e4bbfed5eb6f11b7b351d8.png HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=gKcPGz2UDCasNvHITcL016BHZCCg.WTSN7OMWWID1zc-1771942652.2834604-1.0.1.1-zCGIIZ4i.yP7.3EhdckiFC36MFiQSNHR6Y6ywXzDDDVCbH6r_my3DVCkH19GLaJvjf9xBondx5qbkc24D05qCufCgadnPE6eu4aJrx.E9emjzct7TW_1O..B.LOgs0lx; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zn2UKkSBPaYeS5InZ0CoaiWtVKFMC61glcdseXHyaTX2FnUSvZJZVE9WjhbVsBSm2Obc16vrC3%2BJqYt%2FFOrDQXtGM%2BXT96jslEXyQoq8kOUnU10upw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9648c99c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: \"39f38fff97bceb6dd38d255228384ab9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 369888\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f964eba8e9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54016,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53968)","md5":"39f38fff97bceb6dd38d255228384ab9","sha1":"4f9d5ac34f834ec7f160fe555097691b45d47d39","sha256":"d9b57cfbaea5a38c3d279ba0a64a2fa0ccb499f94dfac8dc8845ac1c0f22f829","sha512":"cf1a36ed2530d962ee9a8013cfa3585dad4e85857e225c6a5670c92a574769d771b6a0f1ff2ae31c176ca078e7f747b704746996fe7dcbf826d906754e5545ed","ssdeep":"1536:fGUifm7kUdwddCriQiLc0Lg261F2BBCsEZf:J1V","tlshash":"cc3322b2f56710ccb363c22292d1f6bc202ae770d746ce96f427766c4ad12a63551fac","first_seen":"2026-01-16T00:46:03.995467Z","last_seen":"2026-08-16T05:27:07.651466Z","times_seen":34278,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/api/public/v1/tur/partners/751/components/4273/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/4273/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Key-Case: camel\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncache-control: no-cache\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1000\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response\r\naccess-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=RTM3JcAi6N9bJM0dyZl30VfMIit3rorCS1Ld9szWrmk-1771942654.018895-1.0.1.1-mvsqJxosl9on_eHk2U6kLkPJTm2d.fzhjGpGyiRceuTocbZGh2R8KRfwRgG0NbdknDZHLhvNzNjwx26YZQuOU2D1vUARnDCKOarCpFl4eRVzLBxlvLWxoTJ.nSGWo10o; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7xJHswoIJmHrK1irgX3B5UJ5yJ3vymWoy9j4QElG3La86z09ZzNiDpphNfH0JqEMuRifBPGfzoS1JuIF7tU1fphNK7K3ZUzwJFLmSQhQZCgWLzU%2Fng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96539ded1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2623,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"77353242a3c264efe9e0ad93ad93952b","sha1":"473813502f0ab01a2faa7b7aceefd65023637e16","sha256":"a69ccd54f673a46ef9bd791a6c58cc69ee5c5665b57c54e19f2008c93fd2789b","sha512":"406443968cd656c6efaaaaa05446e5af2f3fe53769e15da842c5482ce125d0a6bbb42551b588b85ca3f61b308711df439ffa4e56a3a9768e6a4eb09a907cbf25","ssdeep":"","tlshash":"5751bb13b42c9cba5b543b40b4c3394ac99d5847dc0e9974cd498f8d81ea63ec6d32d7","first_seen":"2026-02-24T14:18:16.737309Z","last_seen":"2026-02-24T23:58:46.055967Z","times_seen":3,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/content/images/casino/icon2/02e5e84813e2f68cdffdef4d321b4b98_casinoGameIcon2.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:40.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /content/images/casino/icon2/02e5e84813e2f68cdffdef4d321b4b98_casinoGameIcon2.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8762\r\nserver: cloudflare\r\nlast-modified: Wed, 12 Nov 2025 09:25:22 GMT\r\npriority: u=4,i=?0\r\netag: \"69145282-223a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=Zg80X90TuGQTSs_QxAeLp_zD9NAfhPZ6I9PvTyVIceg-1771942660.660136-1.0.1.1-LVwmBzoikpYJpjpfOYQ.krDgshX49iT1MPc9AEEq9_T5vhJsYFHKyTbLN16CcpWRMEJA2UB_da_4GldDF.MicwEVJpc.3lhUcfz6sPIwWK9uH2ZKLds_yJjxrgxFyhxU; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4TGopObfKgQb4Fr735shrK5y%2Br8AGE9GRyEemtBRkQiPeDUjzdZM01AcbjQoKBsvOTeff%2F7ComoUaBV4%2F7s3F1wyIIplyOvYsHIOb1V07Tkcm%2FuOag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f967d18b976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":8762,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x155, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6adf555acae58233b0f690c066933040","sha1":"4e4cc6ef5bc24505162eaa51330f75b11449d1e2","sha256":"714e20573bb4946284b82b483f46881a1354fba7e1c766803499c1b4df94da81","sha512":"3ca365a9bdf2b1c3c0f985c9274b018a1e2ed80ad0845ab2c4c2528311d7db4ef5cdcb2d60088ddd2d02593daccb6059d8409ded3381b31a9b8faebcb629427d","ssdeep":"192:a/i/IIxQziZAiTtmSZn3NQB8fMOSMu5zWNiNQczCJs3KkZVsX:aa/ZQz/iTASx6aru5W0NQ1JBssX","tlshash":"4602af82d78e35bc2c3a7509a64f2561cd038d04983252da69da56307b8fe02de7a1a7","first_seen":"2026-02-24T14:18:16.739347Z","last_seen":"2026-03-14T00:30:26.669474Z","times_seen":7,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"eu-swarm-newm.m-galabet1050.com/","fqdn":"eu-swarm-newm.m-galabet1050.com","domain":"m-galabet1050.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1050.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 17:08:16 GMT","end":"Thu, 21 May 2026 17:08:15 GMT"},"fingerprint":{"sha1":"06:DC:3E:A8:3B:BD:CD:B7:2A:1C:2D:07:95:79:F5:A5:AC:64:B0:EB","sha256":"41:B9:30:EF:1C:1E:85:F2:ED:01:A0:7C:D4:4C:94:D8:B9:A2:F8:4F:B6:B8:83:22:45:55:33:FD:4F:D1:94:81"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eu-swarm-newm.m-galabet1050.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://m.m-galabet1052.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 8yFrLvYemNzy6H++Anslhw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Tue, 24 Feb 2026 14:17:31 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UewzXWez5qb5l53xaGV4%2FsunN8YaqSzd4cT942TYx9FRGlIZn%2FVtDGjICgRD%2FKtPk9AxHE8TQZToclZs69eQkp5m3OodxKiKYeoL7UNhnO2ru1CEod0JP%2FMU9aj3VGeY83PeU0nWr5bm50B7evFNxhTs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d2f96432ebbe07c-ARN\r\nContent-Encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7583\u0026min_rtt=7557\u0026rtt_var=2140\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2353\u0026recv_bytes=1177\u0026delivery_rate=381655\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=4dd24b096e7b2e74\u0026ts=27\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":37,"connect":44,"send":0,"wait":18,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"eu-swarm-newm.m-galabet1050.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d0d2b7c.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"ecc9e5cf090bf5602a01763e2895acad\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 303371\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f964cea509cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10938), with no line terminators","md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-06-15T21:26:04.407385Z","times_seen":26443,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/VerticationNavigationListGroupItem-BFd5_K1-.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/VerticationNavigationListGroupItem-BFd5_K1-.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/FavoriteGamesContent-C_c3l_eg.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLUQb44iir5w8XJ%2FCvYKRa3Yowrh0i5lfTF2KxqQkRDS8boqNh%2F3dI8%2FVhVOs%2BT1P0POCIyj6kVlyqdYdKp71%2FKccJR2DX7JwvFjxz2CPGEbSxU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9653c9578a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":637,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (636)","md5":"b3fa38e36f93de3948b2cea22c5f8c3f","sha1":"ffbc524fc5703948bc71d74b08c864db053df9ec","sha256":"2e2afc1d5b3f7dc050047f129e3c3a74fa62506afd2d8a7164128efa427d3131","sha512":"9f84e930ea6c03305475718a24df2b7e4640c57d1056b692ebe37efb2ae54031d7d02373fc7f939acbdfeaecd4c1c772e047155b3105d26dc70a635de23417d5","ssdeep":"","tlshash":"5bf00202d490af7cb83a54ce956e8080f9780d70eba0c4b191ed232315365e6730af4e","first_seen":"2026-02-24T14:18:16.742387Z","last_seen":"2026-03-14T00:30:26.671313Z","times_seen":7,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/Odometer-CiW2aCSt.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/Odometer-CiW2aCSt.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/JackpotPoolsWidgetContainer-NDxTfZwN.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OwMLpSEJFyffWif6BvOB%2FVt6VTMh%2BKpZ2LOj1wpQyEgpBW6KJ9TEapTZTwKZjXv%2FEMI8yQeVp2NL7pIJom96lJkewA6pNvtOzpXStCla1IfMzzU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96545ad68a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15462,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15461)","md5":"148d62d889282f08b4e7d20be35bea48","sha1":"7127f5c4d836f81af8862f249cffae00b25c5b3e","sha256":"2dcb46aae1004dc28f252282d778d6310e71077a683c4d8694e75a4aa90803b9","sha512":"ea728ae4daa34f5d9f39bb96a01a796ef4337ef748f2ab3de7304d929d185ec96cb429889bc0f5f65e7aba71249cf200a54f925ca4c387cbe28cc03df4093376","ssdeep":"384:wCkIkVQ3W3r9JDyuhFmPHhP/TFtPpwxw1Z:LrkVQmb9JeuhKzpow1Z","tlshash":"7f6209897962723483a371e055bf4609773b6d6a3808405db27caddabe32c04d12bff5","first_seen":"2026-02-24T14:18:16.744615Z","last_seen":"2026-03-14T00:30:26.691288Z","times_seen":7,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/tr-CoUPPbe1.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/tr-CoUPPbe1.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:00 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t45Jfa3fxH%2Fl7yPzAzGlCVWPdPnM5%2BQ1NodBU0G9Kq%2B1THE8ACGygPKK18pbJKCxpkd2uGlOZ0YuuylurRPTA60TFK8fdygIZj7wSPO2AZP%2FpjI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f964278988a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1755,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1451)","md5":"7904bd6023589e24faa32d1e3809a4d4","sha1":"ee287eab3a4a9bf35c261ebb12679ecf6866b2a4","sha256":"86188ee225a389430fdbeed8517fd4744290b376f5b4dc20ab757cb5cf137063","sha512":"c9f9f55d4dc662c740472052458063aef9f11ff00fb185d8cbbc6f01577caf5afcb7ef54a4d7363b42f5efa0e8c2eead2c4d23690bdbc856a8f986c587e9e469","ssdeep":"","tlshash":"cd31c68aa92fa6738f5c044b9c1c2744594c1b50f59dcd306fe8e4912bb0dbd01af3b4","first_seen":"2026-02-24T14:18:16.746924Z","last_seen":"2026-03-14T00:30:26.709187Z","times_seen":7,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/if-defined-CWaLTnLW.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/if-defined-CWaLTnLW.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bf6xR5roN58U2Qru4ZUK%2FFn2VL8U%2Fi02pSj0pnrHOPb1OnBAdRCkXOH5PtZ1tAs6Rv9ty8%2F%2F2AYqj4Nw6dct2ebnbIlodDp5Yh4UmwwvvW0MCWs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96459a578a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53241,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18566)","md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-06-06T21:30:11.633829Z","times_seen":639,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:30.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 184\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":184,"data":"{\"p\":\"6909cb5dd368031952afadf5\",\"w\":\"1j9744pva\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://m.m-galabet1052.com/tr/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"FiSCOP7izUupWbsIWZHDo\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-mdmw\r\naccess-control-allow-origin: https://m.m-galabet1052.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9d2f963d28cd9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1041,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"aa6e548b2a270fee176fba2366fa20cc","sha1":"b3c2dcf529a16b086e514c02ae76d559ee04e877","sha256":"39987a4a4dabed5dafe4e81dec3e14d62b95a539e4ce357fbd80535167193464","sha512":"e5fb5f3f136557bf4d49c4dc884138e6ea61915f269fbf689069f09a7079f41a53d73faaf5abad8444bbe76cf4afd97de3ea6c19c258f8b471b111ebed66236c","ssdeep":"","tlshash":"9e1175772d8c6e0a5bb2676347983e4522cda7d364425504e1d90e8db6f83bd18834a7","first_seen":"2026-02-24T14:18:16.749771Z","last_seen":"2026-02-24T14:18:16.749771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1735,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1735,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/walletConnect-CiycSUBb.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/walletConnect-CiycSUBb.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:00 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ydg%2FBscdDcTJQteS69V3xApP9UaJEGY3MlRa%2FjJNKlK3eIAX7RpikvjjUyrhUDhWPfgJGN2jtlmtkrl3TtFvaC5gbmKV1CSFrd3RaHXiPB3PDvY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96438bef8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1997)","md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-06-06T21:30:11.623634Z","times_seen":1659,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/media_751_237b9efb5f12420afa19b82e883ffc3d.png","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_237b9efb5f12420afa19b82e883ffc3d.png HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 1274\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Jan 2023 09:54:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"63b54cf2-4fa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=YRtJ9SlArsW46qEihcqi5uO1qGv9KKje5SLFl5NtNvs-1771942652.2780151-1.0.1.1-3yEmbmcR2qP62c1qn7MMSlLYer8GMzYYlNSu3sUlpRDiuzW.Blf0yIaDudpcov_xRsLsHpG9qKq2wdaXL9dOwTga91dzEMmG4VO1sxEgmM4wbdNuq5lpQIXtCT9z57BM; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sa8dp12u97%2FPX1RCAM7TC6S8GHMkf0OtzqXf3aorQHT043JbLmaaOecLxWMoasJ%2FnS6yYHnmDrlvbNE6qPVydLUttH%2Fz0nEjF8zI2%2BP4UPsucnvu%2BA%3D%3D\"}]}\r\ncf-ray: 9d2f9648b9610daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1274,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5778be11909d62bcff461b9ec53f659f","sha1":"b056f146b8fd4b16977c61a0847642eb9819ce42","sha256":"01885049705b68fbf0aa5c50088a1b70e570329d6edbd097fd38cf1042bb2ef8","sha512":"4675add09505c5eca125ed41c12afc4a08b01830537d2a740ff0f35840f1efde7812c9d3295c357ecb47b2c29eee5edef43ef255a822b32c0251e991ce7ca03f","ssdeep":"","tlshash":"1721ba8b17f9505d12c9ad7033621a2591cda9f9bd81cf19f31c071426f1cdacd1b575","first_seen":"2025-10-09T03:39:38.950419Z","last_seen":"2026-08-15T23:17:06.881606Z","times_seen":16,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/log-performance/v3","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"POST /log-performance/v3 HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 96\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":96,"data":"{\"logData\":\"{\\\"socket\\\":1770,\\\"register\\\":0,\\\"widget\\\":5117,\\\"script\\\":3878,\\\"download\\\":1239}\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-dhcz\r\naccess-control-allow-origin: https://m.m-galabet1052.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9d2f9654bb939cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"fda44910deb1a460be4ac5d56d61d837","sha1":"f6d0c643351580307b2eaa6a7560e76965496bc7","sha256":"933b971c6388d594a23fa1559825db5bec8ade2db1240aa8fc9d0c684949e8c9","sha512":"57dda9aa7c29f960cd7948a4e4567844d3289fa729e9e388e7f4edcbdf16bf6a94536598b4f9ff8942849f1f96bd3c00bc24a75e748a36fbf2a145f63bf904c1","ssdeep":"","tlshash":"0e3000000000000000000000000000000000000000000000300000000000000000000c","first_seen":"2023-04-06T02:18:46Z","last_seen":"2026-05-10T02:19:39.188302Z","times_seen":38514,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/content_751_b5d457e738a19fc4862ac67b00e73fac.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_b5d457e738a19fc4862ac67b00e73fac.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 44562\r\nserver: cloudflare\r\nlast-modified: Fri, 20 Feb 2026 16:07:55 GMT\r\npriority: u=4,i=?0\r\netag: \"699886db-ae12\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=0b.GljA_bc2xXmuzTAh8N6y5GFnntv2dKZaqaL97CtQ-1771942654.2023988-1.0.1.1-lfwt01_IaiqW_pJnAgXGHb8uxZkDYZF6YDJeoxtMCg2fuddgAGiqejQcvHgwG_cmTDTmB99P8VAmHWyKZnbR9NLpIiNtkuJgCBnOd2PpOAAqDHUYVbwhLejzq6f4Kiln; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MnhRL1QD%2FcRAABq4rqj0IUZNFMnt%2BdQSL9cNS%2Bgwcu77pRCeRQWVAaHppTAT%2B6DLIviKykOrplZ13Gk4r%2FJlXWbOjsECkJkV4fVDh2UdvbCbX%2BkKfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9654cbb576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":44562,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x220, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9c8d343b5630d05d27dd47d5ff78e9c4","sha1":"0491cf53097a25b05718ec543d217501b84d2575","sha256":"8c4db99a6a4bc7be4be0303b9b52987af164b7bf628d188352d38839f280774c","sha512":"6110914c686452e46066d04b1181841fd9de556c3b6463b1cabc3dd78ae0082fcbaf43c7a5cb6526c500ae7c41c3b11e9bd5cc973637606808f94d8fa57846d6","ssdeep":"768:qgy+9HsSGho4aYGY5YdIT0MuWBJRYlDW8Sl7WP0Tu7PfkCeKQ7:E+9uhpaYGeKIpNf/8+1u7pK","tlshash":"c713f16d89162d3f6a5d832dc12335efbd0f530b5ab0158549c07afd2c190a866afc2b","first_seen":"2026-02-24T14:18:16.75589Z","last_seen":"2026-02-27T17:06:15.482173Z","times_seen":4,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/fonts/default/Roboto.woff2?v=609","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:28.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /fonts/default/Roboto.woff2?v=609 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index.Cj5ks_WG.css\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64248\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ltmp%2Fu9xo9zre9eibq1ABWkjmmOiqxuDUSLNxXic4ZEOiuSK9Tvz1sgpcz63EFcrMoHaegkcpSDWoUgVAFrX4bsZ%2BBykVjEL4Pa34DOycbgrYmE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f963398a38a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64248, version 2.0","md5":"b65b078c2f62cb030e8faa332896afec","sha1":"d5af06e579dd5f400f803b4e24bc1020740b0b8a","sha256":"594544184c059f885e1499c36a4147c3d3b41ce4f50252ac245a3a5faea6c72f","sha512":"34c06275b329ac62dddd6eb3981ef47d022d4e841c6a2659b9c648e77caf58277c91d1aa1b1bc432cbaccf9e3a7c89e67a3f41c940637942e692c90db9d910e1","ssdeep":"1536:T4FysiYyiqM4dWrgU2Tx5hpx1/VjrHS+92eTa:T4FyPY+rEATHH/xye2","tlshash":"df5301e2be45d926afc2dbeca3bd561c210eddbd2480d11717d5eaa002c1dbaf07c252","first_seen":"2023-04-17T11:05:44Z","last_seen":"2026-08-15T11:25:22.038867Z","times_seen":2801,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":173,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/loader.png?v=1735901226","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:30.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /loader.png?v=1735901226 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942650194; twk_idm_key=FiSCOP7izUupWbsIWZHDo\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 748\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 07 Jul 2025 05:58:30 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0AEsgsn2Le6ZTivFY%2BXoV1a332IDto4uLcY1suhJrWdJ1%2B0gVfYKd3nPwtyu%2Bu%2FzF0EAzlQufNKFNXBqfDAMHHRa9Wufm2B2%2B6%2BmFR9kwdGPX60%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f963bdf0f8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":748,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"32a764fce0033e829f53bb97a08c4717","sha1":"f010dc6c149341b82fe1ff9ac386a2f455df8466","sha256":"3668e57cf257d82869a6d02bb8beffab2df3b8026c6caf5742ab5277e92476da","sha512":"23d4e81136be808c40febfff441eb2e507fcc54dd0a8735c487ac0d8cf7b2e26294404101985c8849d53cdd143fab1bfc13426fa7adf751112199bb5ba0f97d2","ssdeep":"","tlshash":"e401b58653f4cf5abaf3e5946c24050c44e68210425a213c940e84dc2ab361600fd1ea","first_seen":"2026-02-24T14:18:16.758632Z","last_seen":"2026-07-16T16:07:12.958595Z","times_seen":27,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/PromotedProductsWidget-BQqw5cqG.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/PromotedProductsWidget-BQqw5cqG.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fxf6GWkmPCeB5bp1CBdW2IZtDEcBawI20COzjggzF0HzTirJuLLklNhSQyklUPO9exoJA%2BEk1%2FMUD%2FjpGs2gW6zHkmkUze9739AH%2Fttz%2Fx%2Filsk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96525d788a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1531,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1530)","md5":"8be677c88a0f6f8b371a2bef29c2c822","sha1":"decebf87286ee5814aaea2e28e762406943fc9d6","sha256":"298cd0bcf516e543afb74916f85aa3adbc521e4498aeefbfe1cedeab998cf1c5","sha512":"a5daac026612d66474c6cf031423dc920d0aa0408e5a49bb731ab62b8ea647e8672135073a42889ac77019eeb6154c348a8999416fb79b6e5ba52783ab4a2875","ssdeep":"","tlshash":"21310082d93c927ee27a04fc125aa0c939067d28dde2c4b480a46d17917d819ff45eec","first_seen":"2026-02-24T14:18:16.760208Z","last_seen":"2026-03-14T00:30:26.804421Z","times_seen":7,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/payments.json?v=07/01/2025-12:54","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:30.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /payments.json?v=07/01/2025-12:54 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942650395; twk_idm_key=FiSCOP7izUupWbsIWZHDo\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:30 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120, no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c3RSOTOHeKsyqMzHmL%2FQfQNYjvX4MrvpXKnl5t7Cns3gqgr%2F2uv4kH%2BJfaDy25j0IhE%2BJ%2BxtpoNcAhT%2Fe946WjTwdbnlOPkSiCCuEJ88D7CCp3Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f963d7b308a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111260,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c8e3c0331ced8933d2a6bee02c22ce56","sha1":"bd43756aa97d7fe60f34eed2a376056d9416d438","sha256":"a6a44e85c9eb027e404b05310d96a47d977f5c6ae9205bb35745230a91b29890","sha512":"9af5217fb3561944f0e112cf64bdb2eb3d94e736e32af56fcb55d68f9691f2a4b0abc77e77ab70fe9320e2c477957ad18b506b198ca202e03026e569f9ac75f4","ssdeep":"384:n7nzqAnzqInrnoOnicnbf24n5MnuOn4qnUqbnZInvunRLnh1YnVT+nL0iTlOHFYL:nE5SrnrQ2jqKj+mCx7r6qstJrBa","tlshash":"3ab3d0a4d4690ce7198971a428bf820776b5434b8e29bd4eb75cc86d0fde80f6db427c","first_seen":"2026-02-24T14:18:16.761886Z","last_seen":"2026-03-14T00:30:26.683568Z","times_seen":12,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":402,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/events-CV3ChliB.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/events-CV3ChliB.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index.es-CSWu3UeV.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:00 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6RC7OthrpSdYmNhSORa2v4XPFZl8BgWq2i4RTtdZnN2pHJJNARYYEbA7WCOKZ1qwhXx9PgxKxy2g96qN5mHFuivoHOGt2mpoirVGCl00fqermxo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96499e168a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6141,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6140)","md5":"c8e97e9b3c7fbb0ae28e6081857c57ea","sha1":"2f2ab98679bfa34936faed846a6562a347f7dd62","sha256":"fcf378050c8338ea0414b258a3ce61043408576603be6f96232c70abc80aac89","sha512":"15d0b5abcd0c0f390a71f78ae63f9dc761df5fa5b9117e0e4edfb23b6463535f4bfcc98dac422b03e695182e145839ed025125f909ed7ea2ac47ac29bbd06e95","ssdeep":"96:rd9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:r3IM2sWMtBq6n3PzH","tlshash":"45c144ccb38574b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9e4126b78","first_seen":"2026-02-24T14:18:16.763465Z","last_seen":"2026-03-14T00:30:26.778085Z","times_seen":7,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"vsa17.tawk.to/s/?k=699db2fc63411febb583aeb2\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OTA5Y2I1ZGQzNjgwMzE5NTJhZmFkZjUiLCJ2aWQiOiI2OTA5Y2I1ZGQzNjgwMzE5NTJhZmFkZjUtYllnbkNrbHRxdjA2MEZTUl9IRzBjIiwic2lkIjoiNjk5ZGIyZmM2MzQxMWZlYmI1ODNhZWIyIiwiaWF0IjoxNzcxOTQyNjUyLCJleHAiOjE3NzE5NDQ0NTIsImp0aSI6IllPLTY5S1cyTmJGV2gwX0hlQXh4ZCJ9.atBLYTohzfHRkWLm-IJ6V8TwX5lFDgNUJ_QR1CdzQFoUH6aTHj0jT8Xs8t1U8W7mzNRTb9m6eM9tcSYc5xWhhQ\u0026EIO=3\u0026transport=websocket\u0026__t=PoG0obO","fqdn":"vsa17.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /s/?k=699db2fc63411febb583aeb2\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OTA5Y2I1ZGQzNjgwMzE5NTJhZmFkZjUiLCJ2aWQiOiI2OTA5Y2I1ZGQzNjgwMzE5NTJhZmFkZjUtYllnbkNrbHRxdjA2MEZTUl9IRzBjIiwic2lkIjoiNjk5ZGIyZmM2MzQxMWZlYmI1ODNhZWIyIiwiaWF0IjoxNzcxOTQyNjUyLCJleHAiOjE3NzE5NDQ0NTIsImp0aSI6IllPLTY5S1cyTmJGV2gwX0hlQXh4ZCJ9.atBLYTohzfHRkWLm-IJ6V8TwX5lFDgNUJ_QR1CdzQFoUH6aTHj0jT8Xs8t1U8W7mzNRTb9m6eM9tcSYc5xWhhQ\u0026EIO=3\u0026transport=websocket\u0026__t=PoG0obO HTTP/1.1\r\nHost: vsa17.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://m.m-galabet1052.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: up8Bujdnkt/RbDCGDMvEMw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 24 Feb 2026 14:17:33 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: cWJFT+AoI0kQJGnKtPc5g3CaOtA=\r\nsec-websocket-extensions: permessage-deflate\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: 9d2f964eaacba0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":42,"connect":50,"send":0,"wait":412,"receive":1,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index.CLH4-zpN.css","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/index.CLH4-zpN.css HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Surgl7XDXvuoY1NBMBtSk%2FXBcOtcsC%2B46K3c%2Furh7sd6oJ%2F6d4O208ofdGDsS9DquFcwRCf1tea39sBE7%2Br32cA9%2BBtawW%2BxNUrsaoEc26SGi7E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96501f308a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1107,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1106)","md5":"0a7e97a84cc11010ff17a284b4186f4c","sha1":"bee6ba22584b8212ca2371f2878add2f3d148fb2","sha256":"f893a76764cd25bb678ad30cbb2dde0f08d9b1d9f0137f64f2629dc0260ae1f9","sha512":"7cdbfffe993914988180b622d0c27c0f434c3f52b8fc48c112030db02a1b71de9b5bb26a7effbd93f32195994506d12fb84d19a1344c5491d8137dd6c26a5947","ssdeep":"","tlshash":"3d117c976a0b14faba7365bf554346eee6238c5bceb3118af6c11728c882791423285c","first_seen":"2025-04-23T10:22:48.882166Z","last_seen":"2026-08-15T11:25:22.037667Z","times_seen":1484,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/e30d09fe-c0dd-4b61-81e2-d6dc09eb9700?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/e30d09fe-c0dd-4b61-81e2-d6dc09eb9700?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2472\r\ncf-ray: 9d2f96513cd6ea60-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3552\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfSFghIByqO-qpSeiAGASfCVErfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=66+5 c=0+4 v=2025.10.15 l=2472 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c9bbc32ce28fd80253987f2e1f0be287","sha1":"ac50a6c9aaaa9a3fd32f610e9858fecee25be6dc","sha256":"9b9632ed8ef4f6d25483053b956d22184ee488efd3f8c22e0ef2626b974475cd","sha512":"5863d7231d17d3edf58896ef5332bb631d9a5c27d06fb934be7653a6847b8918e92ccb66090e97c8b96f5bd51b3c9ae112d2c4eb9407cfe8f617da98ea3d3dd0","ssdeep":"","tlshash":"f8513b2e28bac5e8bedcb4ce2f90883a3283b7511ad4c45552d80854e35fb41a1db0d8","first_seen":"2025-03-01T08:57:15.902828Z","last_seen":"2026-08-16T05:07:46.742901Z","times_seen":2843,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/WagmiConf-DQswithC.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/WagmiConf-DQswithC.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-D2kxYVnt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942651404; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:00 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vIX2CH%2FZq7N7QxKgBH0jL9NmLLOt96OR7H3lyrZc268Wb92pr3t4xaAVmUDZ8A%2FSfHoFVhZZOXpt3fYu9W6qaDJUCYeqxBKxUXTMN9eO%2B3YfjOs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96438bf68a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100711,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52270)","md5":"44d86b1af3aa92c31b954cc119808efd","sha1":"23adc1fdd6bce9f8c0481c71eb21a3e41288fd41","sha256":"f9c20a6e90ec8dc1dbef103ed21fc6b0d537192712e7bf26872ac4763b094a16","sha512":"aeec27c539b5c81611259a359a29a8706e2825957ba52f4a9d4329425b0c17bd064d6f94afbff6a4caaffb58d06504a0fe97d6be855fa485b630c62a172c6100","ssdeep":"1536:r8AqCpPuCdwD7ZajZlO1jMw3AIxkQXo7k8UhVnScp7XTF3waG00GYBl+LtqMEE8v:HqCo/xVXo7NU3q+LrEEnG1sRXon","tlshash":"3aa34ad07196b46103a74ae008bf440bf139ac34200e565cf26decde79b96aa9277f7d","first_seen":"2026-02-24T14:18:16.768194Z","last_seen":"2026-03-14T00:30:26.673113Z","times_seen":7,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/CompetitionDetailsGame.BjmopCg_.css","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/CompetitionDetailsGame.BjmopCg_.css HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FIukkvMVpjnoyrQwmSFOdSA3d%2FtZTVGH%2FWfPPTGqn97PvpTq0AMifJ5pdwb3uizo30eXafVCGtShelKsaCZgeICakkNk3ScJxsKGL%2BspYb6a1jc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96502f398a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":411,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (410)","md5":"78b0bd238b04c9ff089979cc2bdb6199","sha1":"4a6753d0e43523c4ebde0597f14e65e74b9e0d53","sha256":"5ba9002abe94d160ba7591d61308f63e330ddbcd7fc046713d22934b09c7338d","sha512":"030d960be8a0271f46e62307ee571783800624609346f2326a2c8b706588a9a8072c49564001fdcbc64506b0d2d174716053233270d96d8edd0795b5c31d2699","ssdeep":"","tlshash":"b4e065256538103c357e1ffb5b8971d23240f06ac4b278efb700bea6446846f1117a76","first_seen":"2024-08-19T19:50:22.524068Z","last_seen":"2026-08-01T19:19:02.699753Z","times_seen":204,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/tournaments-CYk8Ngz3.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/tournaments-CYk8Ngz3.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/JackpotPoolsWidgetContainer-NDxTfZwN.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AqzZJTrxctMr1Qlu2m5SlscAjeI9zSC13YwwIFgoMWk2pKYupjJJyVi6DYOrld9qD4A5QnqsC%2FTGxGm2%2BeSL6K9PCNaYf6OIEG0aKDeVMeE6igI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96546aed8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1295,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1294)","md5":"eefc0a802a5aad42389101eb604e2302","sha1":"adc4c38fd60efc1b91723f2b848c2822931c7071","sha256":"84209448a17083ea474acfc2fc0fc5b75d67480ade1e5c9602a3e57cc104cbc7","sha512":"9040f290a98e74ffe77672b6d2c2605113c1a279cca62bb3274ca5f20c3fdc031c2f87fafce96104e0db8f141c6031b961d778cd8a11b9f91ae86eb6c0578de3","ssdeep":"","tlshash":"402120c8ceb01f3ab1d7d0ca1c12035225b125556fc1a650932eaff8410874b87ff76a","first_seen":"2026-02-24T14:18:16.770448Z","last_seen":"2026-03-14T00:30:26.660061Z","times_seen":7,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index-BCvg75Ns.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/index-BCvg75Ns.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/WagmiConf-DQswithC.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942651604; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:00 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JvUezCLkuZ7ySRkYwSfxQm7kIu%2Fkao8GaQOIME4I9Edrf22mzA3IVAcN6Bs%2BN7BF87TD0OT%2BO185mUTx%2FylHSxXkc96uBjiWREoiwMIuz46tHcA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9644dffe8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18026,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (17805)","md5":"80684ac427b39b57c54532656918cad7","sha1":"b465ae91c660775fa362fc898ecfa7d48bdf1654","sha256":"e68739d973934f56849354660479710ec2a44e6f31cc44e06565a0d3ba9ac168","sha512":"50b2d184a947d9a71d8f5c654d514919f46dbe4dba4799665f37d37df781bb720a838e9e5120b66bcf5f23c0170f3818f159a5b4b1ca6782455a25a2d02b23a0","ssdeep":"384:aIMci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJ9:aIMci408FFnJrIjE3D/OY2E0xqpc1NKb","tlshash":"938209d0e2b4f7a642e86add80392074f2218c2c347dd0f1b6b6ede970664ca856dd37","first_seen":"2026-02-24T14:18:16.772008Z","last_seen":"2026-03-14T00:30:26.711454Z","times_seen":7,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/Home-29FquIl4.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/Home-29FquIl4.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5aD3WsR0Terosqv6b%2FoLGMOyRuZj5nfpmu1zP2BXfsW9iaca4Gz%2BGX3PyuhYjmyuJopCKfx0ybY3VEijT8%2FRKwS%2FYJruuoOgPcu0U8tgUPXU4WA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647c9148a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":592,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (591)","md5":"c4da4894b5ffa5e8a7d9934b3d3859d1","sha1":"1e0d3b033c1c47b8e788cf1b8a8aa4fbf5855bb0","sha256":"0bc43ade495175e63835fef806c9cf79b003b62f9e08815851bf4f46d7ccc18e","sha512":"e12f56fa8bd4682b72b78effd7946c89a4eab825e9b73f7f433f6758eab22901355d90a5daf9bb7c1a71e838aeac5752d805bda8789455d7546d5a4a9284d306","ssdeep":"","tlshash":"f0f0475da191f87c529b1580f2187c6950692e54f7784140431f05ad477118d442fc0d","first_seen":"2026-02-24T14:18:16.773672Z","last_seen":"2026-03-14T00:30:26.788399Z","times_seen":7,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/content_751_e17e2bd68c4902720215ccdc250ea7cf.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_e17e2bd68c4902720215ccdc250ea7cf.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30858\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Dec 2025 14:02:13 GMT\r\npriority: u=4,i=?0\r\netag: \"694014e5-788a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=jw_j522FZNqvHZQhXvFlw17ZWDEbg3lj5EeCdW5ue1U-1771942654.3994107-1.0.1.1-Wl8A2CVqKGUl5zAOMcbZkFwrulDJoSDh7beTMNI8oVqzsLPnR7blQwAHb.zY6EDsczTv_Y4Xi6KbTWNXqS0hZ2ZU35rHea8vCOa5DPfOOf7pBLxzdSY1vzm9N7D9VJc9; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YtFXDFVIfky9OUP6pWLGE8N3rcLo4RS5zf2AVkYu6%2FX7Pinp9pc7ysghcv4rkLxLr%2FHhJjLp4FsekpFhlBrbIwEZ%2ByUik8n5pKoP4%2F%2FasUEzZN3I6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9655fa6376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":30858,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3a657bf250f0501b6684593c6d3449f","sha1":"3ae10ca24e1ed4fd7f3ee97a04029f84edb29c60","sha256":"4df91740f4d1d34398bcde4b0e71127587fe51241c3283f3e7a3bcffefdfc21e","sha512":"c70376beec80f90f2b6f42daa10038112bca9eb928f50f6dfbbb4b8e9054ecfde0afd7aba72fa826bd64ab0615dae03db9d608d7f63e06af394bcd5b669a2ec5","ssdeep":"768:X2NTeq/6/zzgNTdJxlOo7U+QcbTMcipzeGy3sB1I0:4Kq/6/0O0UOOzeKBS0","tlshash":"22d2e1a0782165c72e6e25483195487b904f5bec73687de5b9ac03b3ed0e2f24f69339","first_seen":"2025-12-24T22:39:16.142316Z","last_seen":"2026-07-06T22:32:46.686102Z","times_seen":63,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/content/images/casino/icon2/28e81370d43fed8c8f49d54379c102dd_casinoGameIcon2.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:40.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /content/images/casino/icon2/28e81370d43fed8c8f49d54379c102dd_casinoGameIcon2.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7856\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Feb 2026 17:36:06 GMT\r\npriority: u=4,i=?0\r\netag: \"6984d506-1eb0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=SG36lnDh3w9TdFJ28cFYsPFcDOtdffo162nMVt0P2l8-1771942660.1356847-1.0.1.1-Mi4XPqtwNE.bexFwdibRB6TqC..7eUkyCKCulGYXxqZQfGzyy0P9CE3hg3Qp5PO9fde_Uww5DqhuqsUtpRJSwISkjhvbEPrvlNjnbklifoTZwA_mGEYUZTdL9MA1F7.A; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rIgMfQTlInPuID081dw9vOUmRFaV2%2BaAwBVnVJpIaNo5%2BzRJYtG5d1OcmIOfJxpDqe9fOTM%2FCfLuhJKXENVHMnWff%2BeNhgkbdGhX93KjgpWXIkdNCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9679d99276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x155, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c1b932cc85399e5a0c15f4912dea8163","sha1":"ee7c619d2d7e0afd3cbc81fd0ded51d125bc48c8","sha256":"243bcaaa7aed33e6f1e90e5face3c2e5bba753d816372aa57e85a8a1169e1494","sha512":"45aa6e57ff085b84c2a6d25210156a5f94c0166ffed3e6541fce42370aeb69cd5bc41f7b82c271686138a1ad766b29a076b2ad18600dfa77b1d6bdf36f144627","ssdeep":"192:fZyt/39zAWof2YjlJqweUEalff96RD7+J8WSRTORrbPIAOun:fQt/crJ9SaV23+CP6r8Zu","tlshash":"3df1c08c394f0b0b0520986e75abae83739357cc3a98411a776a8487b457f70ef05289","first_seen":"2026-02-24T14:18:16.777372Z","last_seen":"2026-03-14T00:30:26.820945Z","times_seen":7,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/media_751_3aa6b8c73a19a0d8563b2832ee14bdd5.png","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_3aa6b8c73a19a0d8563b2832ee14bdd5.png HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2628\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Jan 2023 09:55:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"63b54d13-a44\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=rjCJolOCRJgvbZsLWRUQmzaED0EknTd8HfDO6I6fNMo-1771942652.2810369-1.0.1.1-qNXtZ33Y.uWVJOcvkZUq46OULuAnlL9MMTjnDwz10_K3R_fAqaSHhwusfUw9MNuAeBidqWb7aJ9UUMabSLnMImkTDjkqFQ.MzgW72dj9QsK7_zkWNcuA_aSWLFoMJzob; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uru08mWHtrF4K9ZTm5FyB86yQurQKXYtPPHOugB9TqJWdrCkjRxY60BOCwhXKfdeYC3FHW73%2Bq%2BOpgImmFi3dedPEYfg%2Fom1erizUSAnZyQ39Uv%2BWA%3D%3D\"}]}\r\ncf-ray: 9d2f9648c9870daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e2ffdf0526e3aef32f4360ce01f84978","sha1":"5ea228f934b1bd4b943478ceb22211d6c8354e1d","sha256":"a62e72d437c19140d02920ed024b7dfbb797976f1997a5b344f379e17379f278","sha512":"904d34f704e61de278426c60c52fcb5144ce576ef2d2eaeaa0871383b61f447fc98a3526da3ca15739e8a79f234d93fa37d7faf84783884a2da95e1fe14a4a7e","ssdeep":"","tlshash":"bb513e2c759e12971ab9253d0015435e02fb4e2540cedacfed1dd6b80df4e734a82678","first_seen":"2025-10-09T03:39:38.963493Z","last_seen":"2026-08-15T23:17:06.950297Z","times_seen":16,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/payment_17476_751_ce977d9e1f56bd3d264bff899dce4344.png","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/payment_17476_751_ce977d9e1f56bd3d264bff899dce4344.png HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 26451\r\nserver: cloudflare\r\nlast-modified: Wed, 28 May 2025 15:05:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68372646-6753\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=1PtRwrG1XiGblFyk5817RMnNPR2emB_2k2BduwwOtII-1771942652.3164716-1.0.1.1-rxMm7TnRicNLz8MRnYNo9loRAaNSbyMd5vfxuDLCY7.9oRXygYZyUCeZ09ECFdIKpcKOxMt9jZ0HHA9G1S1qnVgWmXBhuHTbFhtUnRIurhCoKtZv.r5LBaQ9hlT4_SGU; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gyZ3rSgs6G7jkrSYtfw%2B3Bfezd9duDRz8G%2BNDw3i%2BQ9CV222A7Ub6zldgoNABLAzSniYH0H32JlSZgCpJEsOTJYnOfB3%2FdVqTayv2S7Wc1Q00zhrDw%3D%3D\"}]}\r\ncf-ray: 9d2f9648fae90daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":26451,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 84, 8-bit/color RGBA, non-interlaced","md5":"e822b476d00c4c29f4bc4fc56b2e6028","sha1":"efc311ed858c8ae894b921cd284952925cb4397c","sha256":"4e1310addeac111a7bae76301bb0db3e3432cbe5f3fbde48f116436648e1e1aa","sha512":"902cd698db7d9542421db719f47c47e3b1d262ebb6663cbc27a9583270ac9e826db29ad16ee7c91557e0782c968376d63726ceac5ed94e1787845d8255947def","ssdeep":"768:CjMS9eg9uyKvMeqQcrK+aDn1lZejV4PQJAyezr:CjX9wfvMeqDfEFYMEAVr","tlshash":"3bc2e1f7e65916c55c3e9625e1322e391ba34967d84c1949360fef488af40a3f4f9c42","first_seen":"2026-02-24T14:18:16.781727Z","last_seen":"2026-03-14T00:30:26.719438Z","times_seen":8,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: \"af9830eef563b4df395870a483ce549c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 316495\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f964e8a889cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36092,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36049)","md5":"af9830eef563b4df395870a483ce549c","sha1":"2c678a245c7b8984569447c9bbfe182583ef7e56","sha256":"5d919993a3fe6ec4c27ec6696b643900c02b95584a4a21a518eb8809edf12531","sha512":"16416617f0c79b40d196c1a7df699f1e01a130e3df75a4f437b4adfc04fa666ac7987d080bbfe759b849bd81860e6bab5b2af02356a8814f0dd1fa9a64b726d4","ssdeep":"384:uTTacuVZNgxYe4fbgL3w23U3xi7vxEbXR+ziLwH0Lg26/tFTiBB6TX3DYC8:yeyna+ziLwH0Lg261F2BBCX3DZ8","tlshash":"47f2bef1f4b700c8b363c122c3d5f67c6459b770ca86ce92f427666c49e16a63581abc","first_seen":"2025-05-21T12:18:34.219676Z","last_seen":"2026-08-16T05:27:07.796023Z","times_seen":50006,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/branding-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/branding-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: W/\"fe979c92a5ad992510e5629b84a23526\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 472405\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f964eba8f9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19329,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19281)","md5":"fe979c92a5ad992510e5629b84a23526","sha1":"4fee6cd9de53fa82feef4042aa83202f4cd194a5","sha256":"de84306c96c98314e1a796f26df99a70f20590c535a678215d89560007b4dacf","sha512":"633913cef35247da29e85dde7c279353761606e6c508690d4d5924aa89f563354e44c51b053f785800fd3b599feb8fd2d69a2fe55162b4ccab95c84f8ed8739d","ssdeep":"192:XeI2u2acuBLZNgxYe4fbfYLFFDw25lYVRgtUramxi71NZcFRKV7:uTTacuVZNgxYe4fbgL3w23U3xi7vD1","tlshash":"af92dca3b9e310dcd557c632c0d1f67ca82f9a24c357c6e3a9037bb986827d7264198c","first_seen":"2025-05-21T12:18:34.239407Z","last_seen":"2026-08-16T05:27:07.634904Z","times_seen":39265,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/content/images/casino/icon2/1594e021f7f2b1e3be8c40f949505774_casinoGameIcon2.gif","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:43.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /content/images/casino/icon2/1594e021f7f2b1e3be8c40f949505774_casinoGameIcon2.gif HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:44 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1012077\r\nserver: cloudflare\r\nlast-modified: Wed, 28 Jan 2026 15:38:12 GMT\r\npriority: u=4,i=?0\r\netag: \"697a2d64-f716d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=S4TMKbgdtzVZcAqWBELOy1bQPxRzR8y5Gn4VDn3EusU-1771942663.9818838-1.0.1.1-AUGZtYO5TOH2SyJgu4OM5U4V1eaW3NV1gF.IgE7aLcxCG2YSrtDl4pYeCaFBx8S1FDf2eCEvTRWg8BiuxbLhxrJogTosEhUNFieXqZXAK1oJqLcLIEkOtCuFPKV8TDmI; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FgpraLr3SiRCKPSylKJqae%2FBAHnzCSfDw63%2Bwh4HmMIfIN%2FQoc77uu%2F1TzO2HSHqgBL4rhc%2FWiHDctY0WFMcOlVQTjasBLuFIvJTOPucS5FeXE4P7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9691ead676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1012077,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 440 x 310","md5":"df58c9ef6a9fe2400b8068a206bc44c7","sha1":"aeb7477f8725269116ab2348eff848f040314c9c","sha256":"3befa99bdb44c4f4a444f29a042ece4e8b0be8713d1d6201829c01f71f15af25","sha512":"fdd04febfda3eb0ece84ab5e508e3ea2bcb839df95340ceeecdbb22667231493fe695bd1b8bf2f350d19f99d0cb133452c660871809c6f49a36b4777b5845feb","ssdeep":"24576:juvSL8fPnFliz6LiO9pkJ/mZW6OsqHGGKIP3Aem3343zcvcWgHu9pQ/:8SIftk29pMmZEuITEo3sMqQ/","tlshash":"a025339a6f88c1005711f3782e85a55efe359a809f87fdb04e333139f0cda58697a876","first_seen":"2026-02-24T14:18:16.785954Z","last_seen":"2026-06-03T04:20:31.832043Z","times_seen":23,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-24T14:17:27.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 24 Feb 2026 14:17:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: http://m.m-galabet1052.com/tr/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TPE2lAdRSqiioF9X5j0VRxo2hDMhu7XYE0ttb0E6cOQjyhHDFF5L%2Fy4%2FNnEnPkXcpjLdpuVL%2FCIexfiPTd%2BbOTnZN3BBByaxZxuScWfkRQFEkYc%3D\"}]}\r\ncf-ray: 9d2f962a9fa795bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8381,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":46,"dns":13,"connect":8,"send":0,"wait":124,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/___vite-browser-external_commonjs-proxy-B7VwcDRV.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/___vite-browser-external_commonjs-proxy-B7VwcDRV.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/WagmiConf-DQswithC.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942651604; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:00 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xNwNqAZT%2BUmzI6f1UYwZrmbKzQp5Af3DT1RzpKhzUQ75gmyh7wP2HAjvZkOst%2FC7C3ytjTRFzS0B2sufYkndzNdefhTpz1%2BGwTcY0Uuns%2FUEy7w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9644d8048a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":178,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"7d05502d031499b1131a8bf613b677fe","sha1":"e4d9f899fbc7c14c0f2feb419b1008a27fbd7ddc","sha256":"70e9c7c57340d3ad9489809ccefab9c39c0befc2768170648b8947036646eb96","sha512":"4e5dbcf48f652ae16a384326505cd5edbc3a6c5c50524540134ae4a3d01745d2157e03071e9709f84f40507a6a083cebacca9e5538bf8f752c41e08e7639fa34","ssdeep":"","tlshash":"67c0804527d8dcb451771dc3c6159401d54c5e6e77f8f5d0bf0c8e51424258b6278f57","first_seen":"2026-02-24T14:18:16.787946Z","last_seen":"2026-03-14T00:30:26.667652Z","times_seen":7,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/css/max-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/css/max-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\netag: W/\"7c8224daff490314bbee102edaf64029\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 472432\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f96502aae9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100307,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7c8224daff490314bbee102edaf64029","sha1":"13aabbb4f10305443e0fbb19c55fd27c149828a6","sha256":"a3652c70ae4477871298cf7fec970ce38a1a5f26a814c06b72cbbafa9c6f3298","sha512":"4a1ac844d0cfc147baefde211336f72422efaaa9c92b4e3a150e434aa3bcd0ca3ab49c34aefca46bed94139738c01ec1af989beb50b48dc747faef0cb8a779b0","ssdeep":"1536:f/Uifm7kUdwddCri1iLc0Lg261F2BBCrikauV3cGiH27PNWE98MGfU0nPROpmi0U:xauVLmi0V0d+tKaK","tlshash":"dda399b2e56710cc7363c22692c1faac1029e370c757caa6f827767d4bc25963562f9c","first_seen":"2026-01-16T00:46:03.978063Z","last_seen":"2026-06-15T21:26:04.429831Z","times_seen":27805,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"eu-swarm-newm.m-galabet1050.com/","fqdn":"eu-swarm-newm.m-galabet1050.com","domain":"m-galabet1050.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:36.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1050.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 17:08:16 GMT","end":"Thu, 21 May 2026 17:08:15 GMT"},"fingerprint":{"sha1":"06:DC:3E:A8:3B:BD:CD:B7:2A:1C:2D:07:95:79:F5:A5:AC:64:B0:EB","sha256":"41:B9:30:EF:1C:1E:85:F2:ED:01:A0:7C:D4:4C:94:D8:B9:A2:F8:4F:B6:B8:83:22:45:55:33:FD:4F:D1:94:81"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eu-swarm-newm.m-galabet1050.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://m.m-galabet1052.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: lSVdOZsPbipnAc/avEFg+A==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Tue, 24 Feb 2026 14:17:36 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FINqw3R%2Bylu3pEB9RqqkctPviQqsMN%2BcxQQ24TuSbmsFFNm%2FFy2Zv0VtCEIlzd2Ylz336Rpcq1m9xPQH2WynpTRQ6ReepoVzDpxHX2Lk3zsapQi6bO4E4ModV4Ro4P2fag6kmWIM72sVSiF6MRBsplAI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d2f9663085545dd-ARN\r\nContent-Encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7642\u0026min_rtt=7541\u0026rtt_var=2178\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2353\u0026recv_bytes=1177\u0026delivery_rate=378265\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=d007f2c597619953\u0026ts=36\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":22,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"eu-swarm-newm.m-galabet1050.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/InputTypeNumber-CvNgktl_.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/InputTypeNumber-CvNgktl_.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SrgDHDWikAHxpAuTHXZMBxfR%2BkR1UYBbM1q7W5kSjWo%2F9q5mqzx%2Fmls0s3gEYRkIMVAE4fwdqlLrg5zrPePfebeMyjLJkIdGkIurku5uhYIk5jg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647b8ce8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1749)","md5":"6dda88daa7516dffb53d448f427fd93c","sha1":"02c1a98a45041eb0a213ada89990c5e327fcb0e7","sha256":"a8aad3cb9a61bd4ba5a36b71d8cb9d149e8363c4e3907e28e1f5c2181501eb67","sha512":"2845a24f5d2e66d36c1480e66c499b4dbe6b5dc12c8439c078be89c82f77cc81331e840a9be131c22a4a27ca22bc38787570679551139456e970950c9a0672fb","ssdeep":"","tlshash":"0e317412f1189ffe5eb95c80b6ed4010b0524a78d5d844c1f17c7c195abcdca7a53bc5","first_seen":"2026-02-24T14:18:16.790991Z","last_seen":"2026-03-14T00:30:26.696288Z","times_seen":7,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getInjectedListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getInjectedListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 7559\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Tue, 24 Feb 2026 12:11:34 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: 9d2f964ebec6ea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":431352,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"472320048f1140d65c626c738a2d5a11","sha1":"286bead4f5cb83414125186e10ea7b25c0c50c93","sha256":"148076a53747a1e6ee410289ebe3a89c3127a9b7a77264643e425483c928a023","sha512":"ec6a66fa471b0f3ffe18f94439552ea3fc84ca80211b1575dfa023892f1d4f14f04559088f2d92157ab812131856106f9b56582d14902c8056f27ed47db471fe","ssdeep":"3072:bnRupaABaZbVITZZYA5dVAdZ7GlAMIDl3g3Wcmvu7IHkGOQyD9gkx:LsbBgVILl3WHu7WOQEx","tlshash":"1b9444bb8f848f5b1b280bc9212d3d6c999e298bcbc55df6f1c0cf1844f4ab92315566","first_seen":"2026-02-24T14:18:16.793229Z","last_seen":"2026-02-25T02:34:32.597866Z","times_seen":5,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":48,"dns":18,"connect":8,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1682\r\npriority: u=4,i=?0\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: image/webp\r\nx-robots-tag: noindex\r\ncf-ray: 9d2f96516830c0a2-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3551\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEA-Bw7H9k1gZltgcL-Suew9FfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=21+3 c=0+2 v=2025.3.1 l=1682 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1682,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"12fd7a0bbecec898caf25744ceae7549","sha1":"d4e4685c48987c850c780fd8e99de426fb5b19e8","sha256":"fdd5b72b8c65c37fd0db1c494691dc35794639a66ae8c11240def16c07d6e2ac","sha512":"08feddd7bab4b6b6135ba61fc3f12c7f4df27802d2357d1999ccf0dc17874f3d0a6b43368301389885f21a92273a41b420b729e408c2695d5becfbb8ddd5da8e","ssdeep":"","tlshash":"b8311a477584218d4283591bdbf086459953cc1b4b1c6123c11425b249a95731ee13dc","first_seen":"2025-02-27T06:37:34.817516Z","last_seen":"2026-08-16T05:07:46.77827Z","times_seen":1240,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index-D2kxYVnt.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:28.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/index-D2kxYVnt.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120, no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nset-cookie: b1749=0; expires=Wed, 25-Feb-2026 14:17:28 GMT; Max-Age=86400\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Su%2Bm6O94o5lCHoDi8Q1G4oCek36qXO9xiDMJoLD%2BhSVq5dBAbyWFsMXbRuCGh1VBuPcoY9g3YQrU0Agvpd8SMfoTVEuQIUEgqBj4t%2Fd2XNTLSU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96303fa38a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2571026,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1081)","md5":"ac388a861f8d6f63a5bae0242663b0ba","sha1":"475ce742aba0831e672d06dbbc19c6c00c13292e","sha256":"bec81db3c415a348179e3ac4e0ccbd3cf53c1b543dc4d2075c03c79fc4dade11","sha512":"bc85239ffb9545690c3cea33ed965961a3dedc433ec43954d0a165f2118796bc573787faad5aeb045f1d03dccd06ffa30de8abbf27a9186212254052f00aa76a","ssdeep":"12288:RzrvOEpHChf7rCvbB1/0XjIcYD8JAqvlOP47LyBSHA/w9nZrO:9vOEpHChf7XjIcYD8JAqvlOPcyBSp6","tlshash":"fc25a5aa66f720319223f0390e2fd4057a29580f0d4cfd597a5c92946f8c93c97f6fa9","first_seen":"2026-02-24T14:18:16.795859Z","last_seen":"2026-03-14T00:30:26.794201Z","times_seen":7,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":661,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/pageBuilder/pageBuilderCssConfig.json?v=1771942500000","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:29.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /pageBuilder/pageBuilderCssConfig.json?v=1771942500000 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:30 GMT\r\ncontent-type: application/json\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120\r\nlast-modified: Mon, 07 Jul 2025 05:56:00 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sidGBs3JAcdqBHzBZ1IuCyix4wlOtvF%2BaSJrqPRsKcIELDE%2F%2BCq8bBInXw%2BGqAN%2FKE47OT%2BLVp%2BV%2Fn4n3TeLo7D39wCZQ5QixkrkICBvvV%2BqlS0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f963a4b358a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"79f4019c36d7a4cb9df2033e7b5fb84b","sha1":"26669a79ae3fbd6be392a64e7f20374167a4c413","sha256":"ece860692f6cc0dd4334447f98a8c2b4d6b22be7fa93441ce3acb8513ab12f70","sha512":"36cd93b3774a4365767e079a9924399de6c3f5dce18654f4c138d0959085798cffe9a88a78048da50040f5f2eff0d0420ad79e5673a5f4ac5684e84b67418b43","ssdeep":"","tlshash":"afd097119728cf53135aa1b2028fecc1641bf20b1280c5ca70c5e2bd70c86181e83f38","first_seen":"2026-02-24T14:18:16.797449Z","last_seen":"2026-03-23T14:49:47.299334Z","times_seen":16,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/logo.png?v=1735901226","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /logo.png?v=1735901226 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942651806; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 12262\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:58:30 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vIeYkue%2Bbt6gjDrnkQa2cCyyKWG1ejtVjkE0BfFzgfB%2FMSsx0zMXV7steJz3JXX%2F9fgwiLnuXCjiZm6gUZdag%2FTGBM5NwLcR6c2HLjLOUGRhcfU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f96466cb38a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12262,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 120, 8-bit/color RGBA, non-interlaced","md5":"c9720d8842d4c457683753a328b99bbc","sha1":"9a93b0c852502d434555e3634768e7787de8a133","sha256":"4038a85fbc2208d4b00469c4e6aea4718de2fd3d84c6105b5ebcec16123daf9b","sha512":"3d10c9ee1ba496b2955c4902fe4421577a90aa22a0f8b88789f5b07f0d6cf2880573bf96babb439606a92a80ef2120fffceb7e239f26af93e46440b91497d718","ssdeep":"192:ymSLQddBpdUX6qR/4lrlMYzziAfBtz+rPngfxDVdK6/SUm0NEYFjmgtvewQH1hKy:yJLypdUBR2OSzz+z4qT0rFtv3QV02wE/","tlshash":"4242c0c74d6e4f2d78dde39fdc01a3a5aa1bc21f54ac53a043a09b277915b12d764c13","first_seen":"2026-02-24T14:18:16.79909Z","last_seen":"2026-06-06T23:43:56.077243Z","times_seen":14,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/cjs-DLVaAcec.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/cjs-DLVaAcec.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/SystemBetCalculator-BNl9_0zo.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vEQFIJkUZC5M5SIgCJl1iuAMlV7opDaDyj81IWNmXYaizzz3gU4byR2Y5movZlnNUtmdeXFuxueUSrJyJ%2BRLotSB5rUgJ%2FJOUXk4quIwihJqbc4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f964db8cf8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19823,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14376)","md5":"766b980be9596cde74f86c7cb47d832f","sha1":"512202e84cab8669a2e03dacbfc699e57456546b","sha256":"19e2abc96254bc6723d7740eb41ab0094f67a25fa2d683bd8d1842822cf99bf4","sha512":"00e8fcfdd947f0e80ecfbf77aba9cabc84e40719495dec906c25432934c28142e329e615307fca446e23b63c422575b7d7ec9e5cc76c26df263124d2d214d084","ssdeep":"384:4im/dOCh1KcgMxNVEwZ0sygHcrUbOhMXa+V7sn9QFC4EeKDhFpApoqUzNm:4iqMCh1gMxNVEU0sy4oCva+en9q7YhFS","tlshash":"1a92d68030daa4b902ea406450bfa601f2795d1eb11af048f3ebd8d57ba555f11bbf3b","first_seen":"2026-02-24T14:18:16.800713Z","last_seen":"2026-03-14T00:30:26.703477Z","times_seen":7,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/casino/getGames?partner_id=751\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026category=28\u0026limit=4","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /casino/getGames?partner_id=751\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026category=28\u0026limit=4 HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=600\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1000\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response\r\naccess-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=Rl2x81szC7qKFO72fJGobfkWUv.izAtUfaxfXBG0tuE-1771942653.9713311-1.0.1.1-e0udR4xpU6_pUZH6lThp7F27LoSOXS4Wgoah0qRESvY2b6e7EUI3yloRssByqt9ZBpT7DEMG9RNoHUHT8W8bwqj2_nfCjoNie8kpIXDiQlU4WfM5TEHMy7iwJExvfxtH; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FsSk7jQdQ7ifmoAf0tJ62FkUyBF11Z9tGnsDcYhF1aSl4LxOoWuiwtHCcQO1gXpvqiVUFfU9QNrztTSgajni0wJzcSKLBTerhK27fPAP9pXO2WnY7g%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9653599b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7250,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"98563cf8bfca1f7125155c7d89148234","sha1":"1e90eb9d12cec0325f9bdd26049614c818bb9166","sha256":"121d99ccd354d6217fb110c2da7365123921fa9268f75c5dda7e8a8533599d81","sha512":"e5cd500aaffb965e14b8309190252a7a51c128b2e360b037eeee206b31950b354ce98f2fbe256ab8788ae60bc775129d20ea88b87d60b9b1f57afaafcb5ee618","ssdeep":"192:IVZ9D5ibOMGdRZQBTh55LT8TKF1THMoUHKnz5L7BzQBzSmd5JiBOBM5aBlo1gA:u5in75HayLz5AJe","tlshash":"e7e135235f08fae71b56589128563d0dccee2bd395127dc05ebed8ba02e50c246712e7","first_seen":"2026-02-24T14:18:16.802392Z","last_seen":"2026-02-24T14:18:16.802392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6640,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/content_751_28a5826214f9baed1fa135a169c26df9.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:44.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_28a5826214f9baed1fa135a169c26df9.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 136568\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Feb 2026 11:32:43 GMT\r\npriority: u=4,i=?0\r\netag: \"6995a35b-21578\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=9obvdxPdzV8VxSHTKpu9gwx35QU5EQK8rwFehecKpoo-1771942664.3504837-1.0.1.1-xXkGrwpUijQ7s_JEkaKEwm60XsxQOoWFwUjInGhXlbCSyz6lr2S9er4y9VhUW.27Iq4oM0UT_NEmrSEMpmqcH.2MnEALk3BRvfcsIcbPKqSL_QkL83mRA5X6ojGlvteH; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DAVo5mtebtAEjDEsHeJoLZhBa3KK7ZZwX22uyopB4SBqMh5Pk0GG6GR990B%2Bu%2FZ6fNPJ2jJAYLQrPO3DhfLMW52IdOO%2FBMcpQITPpk7AnYdbv1fHMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f96942df276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":136568,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x738, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a40b04c966892e138c5b01eadcb138fb","sha1":"2e66eff1e911f44fad511bdbe13f5b46eeaba4fb","sha256":"960f91396bba05dcb779082f87e385f249706efb068c9af5fb64bd4e138b4c9a","sha512":"d415c259f465575dabe4e80d8d0bac725a719054f5d3e90a3db2c75383ba293e7181ac02072a07e47a6698e7fe517c51110d8b31ed279eb4f7c2e8997b1b76fb","ssdeep":"3072:FqeW75l+0LtELLYny7eKWPXoderCyXnHbLnVjRen4xT+TCs6F3Klxl8sROQ:Fq20LtEMKH0JLensACtF3K3xRz","tlshash":"57d3230f54dea893671c83589b0db5711e1cc7c48d9d5ae88eaa8ee31cf772079c2687","first_seen":"2026-02-24T14:18:16.803884Z","last_seen":"2026-02-24T23:58:46.07191Z","times_seen":3,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index-CJ9HkosN.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/index-CJ9HkosN.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/WagmiConf-DQswithC.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942651604; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:00 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ty5Y3E8RCT2Rxh3Axb%2FJZdlXkEhIh6HXnOUfzUEWzpo%2F9SIp%2FdL5NJtfkzpK9BxRs1%2BKuOZbd2xtfH8nYYxPRDVtQVo7XV%2FEJj5HAuQ57BTB74%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9644d8028a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221127,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37506)","md5":"b224cc25c350a7d3c8fa0937d6d0d93c","sha1":"55ca754d93ca4a04879d5e3ff8ba2902a0c33c54","sha256":"ec75cb08b7d2ab4c8b3ba53cad812af91e70fbbe95ba3c4cb7afc0bad60d565d","sha512":"3e6a818d2d309344518c2a9bfcd1fd2e4432d21e7aef9e93fa0de3aeffcfc30a190d0b8007466553d5bafc655b9737b7bb9de9bd13dc6c20b4c7a8c7e3ce3b66","ssdeep":"6144:efEL9y0h4R78o8e4YmIALoh6wj9Sd51jjVvFaTIRcDGRD6OL:ecJy0h4R78o8e4Yf/j9e5xaTIFROI","tlshash":"86240ac4b274b0b556e59494502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","first_seen":"2026-02-24T14:18:16.805349Z","last_seen":"2026-03-14T00:30:26.730681Z","times_seen":7,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-7941cc06.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"09a6b2a4fc1400ec37c1115e6aa1670f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 392190\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f964cea579cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53530,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53411)","md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-06-15T21:26:04.427415Z","times_seen":34009,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAllListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1\u0026recommendedIds=6db5c2cd78ea5a09e820b7543dacc90bf3b1727e5bbaddff544b301de1f74f39%2Cc57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2Cecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getAllListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1\u0026recommendedIds=6db5c2cd78ea5a09e820b7543dacc90bf3b1727e5bbaddff544b301de1f74f39%2Cc57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2Cecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 7559\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Tue, 24 Feb 2026 12:11:34 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\ncf-ray: 9d2f964ebecaea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4368,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1594744c430c14575dd987b06663f8af","sha1":"6ae3a00b9045083fc80dba950b908f9e7513e211","sha256":"db922d127c83813e54ac9a7e4fb61318bdc34765fde199edd3859da07f9b1a04","sha512":"6dbc4888f6eb430e5c148b063707a5488e01f7a4ffef184ac67db37cb847c0d69eff429b0c1bd3122ca4b1594229d6f4f600497011a876d5ddaada4d1fb9569f","ssdeep":"96:nNSNbh/YiOQxX+1A2teUB7SOMVMrhIa1WUqrZurozkhLQtwN:8OQVqfhSPbUK6J0i","tlshash":"ec9110b79f444a5e2b2407c9702d3e9c855e250bcbc09ceaf0c0cf2984f9eb967559a6","first_seen":"2026-02-01T05:09:11.282943Z","last_seen":"2026-06-06T21:30:11.817911Z","times_seen":246,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/api/public/v1/tur/partners/751/components/6714/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/6714/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Key-Case: camel\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncache-control: no-cache\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1000\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response\r\naccess-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=JqQiIYiV4OEqLVyLIG8aEZYcJJQBL8E2jdM9Boddk20-1771942654.186833-1.0.1.1-4Xy9nZgpYiuKpiUboSyKm6LLFXi49X4TZno9Lnyajv5YrtU5FuuqWZsop2wDFd9bMt8QZgvSHQ.FYSf2U0ngMteGG3sM.ojcyOFkNRx2xYyfsrSj2D.TiWLa.I9wRyki; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zDEuN9k9el%2FPkTdBr5uo93FPkAm0Fqqi6kkcOuXK6PtHWRKoxd9k8HBxKfiWgIet54xIxbAUHr9WVrA1jItOPXGGUTMdijK%2FzhnxGbHuAfE78V4vlQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9654ac641a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":49,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0574eaff1e45adea018a5aa1e9177f41","sha1":"a1bb710af34c53bcfec01a4ab8773c2ae5877b28","sha256":"2eae6bca13b339eb6ecdf941c29ee842a5788b210f695a10907dccf0435bdc8c","sha512":"38b7154aca04a476a5f13f581f842c1f7c28a078381e6d1483e28c559b5742c48c423b193c7cad9d64ea2a4d2d7e8ab04637dfe4d27f71284d39fceeda34a263","ssdeep":"","tlshash":"569002011e059471b4022145412e9d4125b871125110402099dd57248b10121688382a","first_seen":"2023-06-07T21:20:12Z","last_seen":"2026-08-15T23:17:06.966026Z","times_seen":2187,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/tr.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:30.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/tr.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:17:30 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"b1c2a4d2b221a5c3df91a782a9958602\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7557\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f963e78978a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12522,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text","md5":"d5c878b97a6e060ddcc4f14fac2c8f68","sha1":"8f1cfd2be7067d0f230c6a8e4e85f700611ac5d3","sha256":"205a43ac3282e1533a6f03102f07c4b6fdb957b777e85135585af927547dda82","sha512":"9f49e1e332fbfc76add070a561f936093d3c54d0c9e0de4bd92407fd31a6716053b5177d586f8300394c15f21d9d7b68c9f4a25abccb5190ec3255eb87be6ab1","ssdeep":"192:OyJZiyVI8zVt8yr174zUet94dgbIfCTLOSWhmiUSI8MRcM:Bil4r8yB0ZgcTLHcmiLMRL","tlshash":"49429519cd61dd5b0196a34bf4db1643b0a942871f20382dbb4c86bd1f8e9af60fa74d","first_seen":"2025-06-19T03:00:53.745119Z","last_seen":"2026-05-13T07:53:47.020299Z","times_seen":585,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-app.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"172.67.73.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/js/fasttrack-crm-app.js?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: jD3YWZG5NtFt4BcajB7OMpiBQ.UUxxmD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=usrsM1RdC2hD2vl6W0q0OZbl%2FuzSP47QjEqkiaefhQnHmMmZyaLFfKgWbUYwr3ZD4tOFUEFNFZLGXPFRvbZeLy2VOjw%2FiQa2lzU95PNVdyrMDhcMunv4YGu8IfmA7A%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 0ca6102b671acc9950502eeeca241bf8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: 7uL6p0Gdz0FsswAF9btOxozWyR15Hqcigy_wLrqZbYA083k_9w-XoQ==\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"c2b96460440b1358a43a511913fcc46a\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f964ecb23c8cb-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":75107,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c2b96460440b1358a43a511913fcc46a","sha1":"815bc669e0c05413dd3618b44e995de5200098b8","sha256":"6a86bcf9466e23eb5dd702ffae4b53f730cde0c3a160ccfff8afca7169cd7c98","sha512":"64c88dfbdb85e2b328f8e690a4829accddbc943dfe479a4210ddf28c872f5fccedd46f23c525e2653f27d6e3d24aefaac7d9500f8027c0f08ab2be0abbe58d13","ssdeep":"768:HQzjpSkGROiRfEu8T3eSwKo2hWN0Kh4yPaw6ANGp2u+A47WFfVVoO4kC:wHpSbROiVJ88hawKV+A47OVo2C","tlshash":"4773b88db1d2badd4de32021535b3604f23b1974542bd484f7acedd52a28b0be227b6d","first_seen":"2026-02-12T21:09:52.719393Z","last_seen":"2026-04-14T09:08:05.884309Z","times_seen":63,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAssetImage/692ed6ba-e569-459a-556a-776476829e00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getAssetImage/692ed6ba-e569-459a-556a-776476829e00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 628\r\ncf-ray: 9d2f96513ca2ea60-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfaRKjj98wG78-Q94g8ciN3whHfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=1019+1 c=0+1 v=2025.6.1 l=628 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"07a8ca43077147f4b93899efbe31ed8d","sha1":"bb87180866adc635991e4867c8222fc4387331ba","sha256":"b22b238c613c9bfcf13e8340213b734fea3bd0b9b2fe67648e3ba6decc104e89","sha512":"6d9a2235c65c224e78bd78025eacb630cca9bc9c4a838fd540de031cca2e8c442460eae186359cb98dcb1f1eb867414c6b5b77c78a2f3e1be6f6f36b254111c4","ssdeep":"","tlshash":"90f062be0d21c29ae04842881a0c6c5da472a9b9fb4424c4eaa5f7a67c0319433a54b0","first_seen":"2024-06-15T18:00:08Z","last_seen":"2026-08-12T02:21:48.822267Z","times_seen":2323,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/CasinoGameDetailsTournaments.CPzZFycI.css","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/CasinoGameDetailsTournaments.CPzZFycI.css HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jpMN4%2FPO4ADLmYiXzp1Fj31WPF4%2FmZCHo197prHCwW%2BCNM%2BIfaH4LYO3UOAwtrIXJxQb8WD3HBO8X9DgrhR1NrF1v22XJfhnAZs3JK37uwsj8kc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96525d4d8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28756,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (28753)","md5":"3e5cba74976bfee149e76bf6d1969e90","sha1":"19bc1d6cf38ca6e3a2a31f5164d771af6d8ddf6e","sha256":"5fae57f97e1ba14050fafc1b22d5ee350969e5ea019380a29a63f2270eadffb5","sha512":"1c1b8d7048c9d7183f7ca2ebadb195331fc92cd80555299db73e1e59f877ffcbfc69a2b18258671e5d4cca9bcff9cc13b9c6b86964462762257f60730b93bf71","ssdeep":"384:DmJpEjg1OmE9u/xGPbmKroZfknfF83XtNro:DmKg1OG/xfKroZcf+3X8","tlshash":"05d297737a053634f477a31aef81de6d3cd85819ce23e6359c6422268bd7ef581312a8","first_seen":"2026-02-24T14:18:16.811038Z","last_seen":"2026-03-14T00:30:26.686756Z","times_seen":7,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/Tabs__platform.COD5c-My.css","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/Tabs__platform.COD5c-My.css HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iut1AymMrBe9dPAzj%2BFU2QJbya9NTP1meaHg9KM22R0jWiGW6qVcUIc3XauXqWqjam6fcSVFtA8rZy42wUI1nck0V73zCAJBUeaKjb%2BzAhv%2FekE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96525d508a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6006,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6005)","md5":"b549e1bdca62ecdb6afb0fc4332136e6","sha1":"e17cd327cb0fe34492fb2814c5c10b58ac365e18","sha256":"a2f1a644f61f467da33e1fe96441b9a1a542c492be11037e637ddb333bae5e5a","sha512":"b31693058e1e35a4c9f0c281fd975ab3c61000bd961f8e23d396c930119128bd2b413736784b52c91e17bba6d7299ca140d9f3124fa44c4124559d2df37b3290","ssdeep":"48:ca8yg49rYwZ1oT8SQwlwqwR+q23wP6h+wWw8wbl2Il2Xl2W6HJO+NMrl2wBl2wJo:nY","tlshash":"55c1c106972413fc37601529baf5d7645a26e2624a3e3ccd379364364f38e8ee636187","first_seen":"2025-10-13T18:13:09.669587Z","last_seen":"2026-05-11T07:16:11.274169Z","times_seen":21,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"eu-swarm-newm.m-galabet1050.com/","fqdn":"eu-swarm-newm.m-galabet1050.com","domain":"m-galabet1050.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:46.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1050.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 17:08:16 GMT","end":"Thu, 21 May 2026 17:08:15 GMT"},"fingerprint":{"sha1":"06:DC:3E:A8:3B:BD:CD:B7:2A:1C:2D:07:95:79:F5:A5:AC:64:B0:EB","sha256":"41:B9:30:EF:1C:1E:85:F2:ED:01:A0:7C:D4:4C:94:D8:B9:A2:F8:4F:B6:B8:83:22:45:55:33:FD:4F:D1:94:81"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eu-swarm-newm.m-galabet1050.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://m.m-galabet1052.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: D1cQ0sCqngBd1BGYel/YoQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Tue, 24 Feb 2026 14:17:46 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GJ1k8K1pTQfTT0RVdCM%2FPcR3X2oIXb9kKWUDTj8gVlPID989t3SCcNMRUEtZeOb6DUV7Yfw2I25bhvAHyUDU8irvSV3VXhBktWbtFh25J4C7ezbxFHmvrR88843TDjS7utK2oEFdqD5%2F4plR3PBrCsCV\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d2f96a24f1b96b1-ARN\r\nContent-Encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7744\u0026min_rtt=7584\u0026rtt_var=2249\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2352\u0026recv_bytes=1177\u0026delivery_rate=377969\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=fbf1e3d41eb73719\u0026ts=29\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":18,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"eu-swarm-newm.m-galabet1050.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/loader/fasttrack-crm.js","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"172.67.73.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /loader/fasttrack-crm.js HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Feb 2026 13:55:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: X9ovE_PVlm7QTMnZs7pgGdxk3XrTsm57\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T4BCRl94%2Fu4YnUV27sMqR8htCDnf04ePLBV5l5eGPz7PhhP2vtnGIoVWaPjvYqsoy8YnriY3PqkGuL9%2BDbRj%2BIbgEo1iIJz%2F5tXamN4hz4j0GFipSAD%2BTdMPIUdSwg%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 08dc547306e2c7102196b53ce0859e80.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA60-P11\r\nx-amz-cf-id: PCb-9sRNJT74zT35kcMuKkglZxwv8SnnaMgOpIrfLpaxlO-FT6gqdA==\r\nage: 2195\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\netag: W/\"0e62b669f80928b5dac9ece193256095\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f96478ec1dcff-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":6791,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0e62b669f80928b5dac9ece193256095","sha1":"a04e0c32df6e15dd5621258cdab16ca08361d27a","sha256":"cd306f0e4ea334dc0a9ab35e3e6c3c73a34876b8d8be27330916196042a1437d","sha512":"930f28be027cbe059bedfe820c6920d8668380c8aef844a15c140de8e907d2be6c5eb38470f0809709bf8d2d0cffd411c61a92a1fb1592503d59e24ff8350cc0","ssdeep":"192:/XKuPlMK5EbbbCUuUD7Z4ac2tMOx5YemndU25i5ObHwxaf6pedviiA:vKEiw8nbxDt4atx5Ye4ymr//A","tlshash":"e5e10e5c29f394610a93351f033be125f3b6e533221eec41b9dc8968af54667caa7d88","first_seen":"2026-02-12T21:09:52.600201Z","last_seen":"2026-04-14T09:08:05.84184Z","times_seen":66,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":112,"dns":35,"connect":9,"send":0,"wait":20,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/AppSettingsButton-BANHATFV.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/AppSettingsButton-BANHATFV.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-D2kxYVnt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942652027; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IMo%2BHkw5cTGtm4TBep%2FCXqFBR1HvIO7jKeshDr9p8jww7GppXV9V4UnZe5T%2F02TVUHAj7A0Zffn0z98FVnwmUM4yc5S6jDvtlUtJ9Z0Kz%2FsntNU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647d93d8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":385,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (384)","md5":"b671422d29097c7d76891530fb27b9bd","sha1":"d752f1a8b02337bce628fd1b80b7c21665871ca2","sha256":"648a6a80b5a1013a983db2d23e885e890f6699abf8262d29419e3b00939eec7c","sha512":"42dcbc325a4424ac326ef15495ff6f933d3d45045d8e445361d775410a8873dfac377c7c46b7cca00955870b8290aa6ffaff894defe5f76aada838474f00a61d","ssdeep":"","tlshash":"59e068875095d3fe17f52ae2c00b82056616ad78d785990240fca1917af4192d15ea2b","first_seen":"2026-02-24T14:18:16.814734Z","last_seen":"2026-03-14T00:30:26.697069Z","times_seen":7,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/BetslipButton-BLwQXbO9.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/BetslipButton-BLwQXbO9.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-D2kxYVnt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942652027; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ImoQxn5oxBoXc77KQinP%2BMOGLGK%2FmTpPWcqFuBfjLHM%2F9z6OFK2qrWq5K8U1rk4e8qYg7oJW3PNTuqO7d8I%2BPNUZtOvgAQ63k4abq7cq81RWHA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647d94c8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":418,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (417)","md5":"94c0b9a41e53bfc380ed72c582bb8567","sha1":"364f683d5be662a083e4be546c45de4d7e7a148b","sha256":"3e478388e180c74ecb10e29cac8c8dd11606a18d0e9d980dd191fa058b8284ab","sha512":"d04c0ac4b418f6417837859396c4519262907a0b0fa23b0930d8a53b1273a07f1eab278f1c72b9c3d8a76c92be9006f3d79b7607a9629d376f60284e4802602a","ssdeep":"","tlshash":"68e0f1464948c2fe0b661dd621028202342296bcb345e68180fa6c527eb4556c82fe2f","first_seen":"2026-02-24T14:18:16.816242Z","last_seen":"2026-03-14T00:30:26.679546Z","times_seen":7,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/77c1d3dd-0213-400a-f9cc-bfd524c47f00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/77c1d3dd-0213-400a-f9cc-bfd524c47f00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1404\r\ncf-ray: 9d2f96515d22ea60-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3552\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfvWH7-l2WGZEJvxD_-cbyo5fufmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=713+6 c=0+6 v=2024.10.6 l=1404 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1404,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"434c7550a1a937d1e7e8bb8416691d9b","sha1":"d837654b42d1474560a5698cfac3514209cde2c2","sha256":"5f0f065528ec2543e34a03df1cd588b4c4ce7764d1ff62e67cec0677f638c549","sha512":"eefe6cf29ea82af55070456f2bf2cf1ab3c3328938ea092695f0a25370e6cef7ed1da43633a4548b22b46d7d7a87253ef01b2c01847ea84725cd4acc7be813fb","ssdeep":"","tlshash":"9f21e6a32c3914ddefa65f1485a00d8dff03c1a5983ee3d896e83548e5788da6ca00c2","first_seen":"2024-12-05T15:42:26.602777Z","last_seen":"2026-08-16T03:51:10.331029Z","times_seen":2958,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/header.json?v=07/01/2025-12:54","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /header.json?v=07/01/2025-12:54 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942651806; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: application/json\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120\r\nlast-modified: Mon, 07 Jul 2025 05:58:30 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CVJHkaI%2BnuzMSIKht7XOgzUQ6d9%2FTRd0bnfheEjXeyOm%2FLBFORXfU4Hc%2BSGW2lTmYyjq0DVc1Z02jgXtOuX16dxHlpaWAeh0zHWEJVOHNCxLg2E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96467cc08a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4fbc119c5c8514e3587fdfa01f205866","sha1":"a396d7f127ee203b471f1a7e507184318e74163d","sha256":"10279aa2fbd66a0c0140d4b4cf9a39b0c9bd14b18bb35f1bd6eb26eab355b9d9","sha512":"9eef97111b2474b705b496860ecd29c7c591ddcb79887d755e5ea7bcf2d578a68bbecdc54ce4f11954f679ff2b8b5cf060da8cd4287a78a1fc3a92fdfc6125b7","ssdeep":"","tlshash":"cdd0a73aec10da7073a0c413c18067801140e514d644485c9cddea5a93dd7891180b67","first_seen":"2025-12-24T22:39:16.192168Z","last_seen":"2026-07-16T16:07:12.950479Z","times_seen":80,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/SystemBetCalculator-BNl9_0zo.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/SystemBetCalculator-BNl9_0zo.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-D2kxYVnt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942652027; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pmlumMmNhqbPZqj95MG0zcKUjEVsduheFmvD3A%2BuK08%2FRU9jqGBi1lIMdQSzjoAgxmzHTg5ifkJkvjd05BZlX0Oay1%2FqxYADbhsm4UZKqJr7OsE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96483a328a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4807,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (4806)","md5":"53ba20b5dc2c2fea70b3198d93be94b3","sha1":"47c830e86d62a21da199d90942fef4051a5faa78","sha256":"edf5fb95b014e5581f13cdf264be1719215b17c29567a0b3557c13311c139b78","sha512":"3b304ece4642a40e03c06aecd0bd154e00d281a0b26ad7de02de929197aa66cb3c2a7c54e1721887b3c29349d3995f151daf219d7c404f7e1c0384eb0550e7c1","ssdeep":"96:DK/I9MQWprKbWL2+NjIaKc+iH5QmfP+hA1brl:DKbQ5bWNNjZKEZ911brl","tlshash":"c9a13100b550ebfdadba1ac2ad5e403c71191b58d22922d1b1fc6d31ea3459137a3fbe","first_seen":"2026-02-24T14:18:16.820081Z","last_seen":"2026-03-14T00:30:26.815661Z","times_seen":7,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/payment_751_8eecf60cdd1f328083e563229aaf8375.png","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/payment_751_8eecf60cdd1f328083e563229aaf8375.png HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=gDubJV.TOURcuHDk.DBZwUXp5wQRAE8NNGF.RPfHVL0-1771942652.3186307-1.0.1.1-OBzWujJCyjw9buWjobPBpriZSYFAx.niy842g6icVtLIqpdg9qeTuqsjccMK_5GLTNJKCobIsj7WiL28q48tV6kxsVCKqiIG1Fxlg.TnrlZb18vn0TqTtAWsBHZhUS1y; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PXHxoLH6%2FQWXJC5ZDjbvPYyqLoTQx5fPfSpkRgxop0Lpy2la740ZKb7vM5w5S4hYtpB7K%2FwbiddoreZjqu3oeW8UMCFhcggakpF6zrSmHAnOOlj8aQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9648faf80daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/homepage.json?v=07/01/2025-12:54","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /homepage.json?v=07/01/2025-12:54 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: application/json\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120\r\nlast-modified: Mon, 07 Jul 2025 05:58:30 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LxoyUqDwp0Kyb6UiU2LhlTThntPzbKXI%2B8X94KX4uthzcJiIbQ2sPZwT8ekA2VQdPkIBhqn6P%2Byx30A9nZbuEbbEUD7QTW8yIezSLOu00oAU6cI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f964f6d188a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2489,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1e50ed328635a7e086878d1d2fe03a56","sha1":"e54a841d0cfbd4fb29b7a2dc0cdbe08a8854eb7d","sha256":"01bb5d4be9a8b4a9109aaee4a10bde8d975c603f419a9dd3d6bb7c2c055dc2fc","sha512":"39e427addb6c64213998c44a8ff4cac7171b1f65fef6a331b67442acdb3c661ff7e9f8d9ed7dc8a34a02103fc20a9d8ea3f401bdb6ca149a89b99404aa283a2e","ssdeep":"","tlshash":"7d51373da814eeb8b3a08963d2c253816541d964c7d84c9c1cedda6ad3ed2991484faf","first_seen":"2026-02-24T14:18:16.82137Z","last_seen":"2026-03-14T00:30:26.767954Z","times_seen":7,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/api/public/v1/tur/partners/751/notifications/whats_new?platform=1\u0026country=NO","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"OPTIONS /api/public/v1/tur/partners/751/notifications/whats_new?platform=1\u0026country=NO HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-key-case\r\nReferer: https://m.m-galabet1052.com/\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1000\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response\r\naccess-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=dJUy_ei8pykG5Pz.sfH6x.Dh3eiIBt8po0tyERXArXg-1771942654.0806267-1.0.1.1-UYhJ_8IfNVz.e3.KBCVaFiOLuCGNC.nhzFA3gQPuAw1.3P3PsCp7lMaobC_rn6VNG1QDUD6z9Gk_Oho4LwSZ5VcBh_rDpLX9RxTIShOBsud_87NVMCvbSOJNF0YX6ZE2; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=29OqsTk3FbEKkAwyDzpDsqnp7K1YsvRV%2B4vPXYjQUObpW%2FrK6rSnWxOZMDUq1MR4co2TXxAN3hfYVQw4Ei%2FvxzMQiU%2BdoEzKS8D%2BEj6silN6rwbTeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f9653f8321a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/SystemBetCalculator.1gGs0XcT.css","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/SystemBetCalculator.1gGs0XcT.css HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942651806; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lo03sXXv2m65KIxAPTBK%2BpsWmg5BNuzm8rwlFU6nnRLNTm3GPdIMiFyyiYoPmawfvRLtnZxAnUZSTr6eJjyw1mTbRPELaQNyntQ4YCPf4E%2F0ki0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96460b818a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3417,"size_decoded":0,"mime_type":"text/css","magic":"SHARC architecture file","md5":"ea4a9f25e4ab4c5152dd3c1bf12eac87","sha1":"95d4407713482ae7a59e32aac5ceee9eb1a52b7f","sha256":"8f4862d722db55865872c47fcdec424f30effd46561c923ff8c226851fa85aaf","sha512":"37cd299c7ce1a0be6230f1e50cb12ea1c4c2f61f50fdecac2bc9da8735a49a8e3a14937bc0a796e6ff94e723ae434821ccc5628f62ab8541ffa0a5c7af442ac7","ssdeep":"","tlshash":"2d61bc112e2510797d33fbabaa8056ed2364e52189b232da76805f32d1891e11377f7c","first_seen":"2025-06-20T01:06:59.462972Z","last_seen":"2026-08-04T13:12:00.067939Z","times_seen":32,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/SystemBetCalculator-BNl9_0zo.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/SystemBetCalculator-BNl9_0zo.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YnSpfgtVDN888xI15%2FAQ7Py96E%2FxDKMXo60vbDpa7U3mMDWdkSyVsyotcM3LDuifqWnlPa4L%2Bat3pX%2B6Azo4KkpnKZBDKiLE9V33lalIEE4%2Bkqk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647a8c38a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4807,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (4806)","md5":"53ba20b5dc2c2fea70b3198d93be94b3","sha1":"47c830e86d62a21da199d90942fef4051a5faa78","sha256":"edf5fb95b014e5581f13cdf264be1719215b17c29567a0b3557c13311c139b78","sha512":"3b304ece4642a40e03c06aecd0bd154e00d281a0b26ad7de02de929197aa66cb3c2a7c54e1721887b3c29349d3995f151daf219d7c404f7e1c0384eb0550e7c1","ssdeep":"96:DK/I9MQWprKbWL2+NjIaKc+iH5QmfP+hA1brl:DKbQ5bWNNjZKEZ911brl","tlshash":"c9a13100b550ebfdadba1ac2ad5e403c71191b58d22922d1b1fc6d31ea3459137a3fbe","first_seen":"2026-02-24T14:18:16.820081Z","last_seen":"2026-03-14T00:30:26.815661Z","times_seen":7,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/FavoriteGamesButton-Gc2t0UFU.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/FavoriteGamesButton-Gc2t0UFU.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-D2kxYVnt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942652027; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bh%2BLGuCe76Qlb3Yqq6Oi0CBBH92FC%2BvgPAIKo5ULlQrMcB0jScoWruJ1VrjSiaLObE%2FpXT9KeFyOHebWZRxUISYltM9f7%2BSQ3Xs2V9FLca%2FamGw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647d9398a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":427,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (426)","md5":"1afc8809fb5e9f5b815b42e2d8108480","sha1":"e7f578e703d58f7e06b89d41e629dfed29182f1c","sha256":"c3a2ee34677ec82d22971a0603bfc974bc7e1c5ff508a87671f65fdc2a0ba619","sha512":"838fd81c83fabd10f84108a0cb2ea62f40814c55066d7d180bb9e30944049f3e27671ea309a6d31cfa1e49327c1609cc45ed95aeb2f93c7ef5ae28cd1a4684e6","ssdeep":"","tlshash":"e9e0a3066049e1fe2b621ae52507c1142426a57cff98d19040d919953db1457c91fd6f","first_seen":"2026-02-24T14:18:16.824454Z","last_seen":"2026-03-14T00:30:26.837513Z","times_seen":7,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/jackpot-Bj3led0W.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/jackpot-Bj3led0W.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/JackpotPoolsWidgetContainer-NDxTfZwN.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S04LvytM0F7MvY6JBxAGecMawwVe43F%2BCjTEzfR2f0nAyCB4tgi%2FDdOMVw2PyHG5LTve4nZhqZAENXHTuAwZEJwyZ7Urfy5au1DgaEGDb0hSyQc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96545ad08a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":345,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (344)","md5":"4780f7e64a8b8eb33f983e1697323d32","sha1":"871df83d5d466cbc809d01205102769680a05c97","sha256":"478f45dba7fae1924e912775ca8ab5093dd20755fc5ef9a35d38866e2b73698f","sha512":"5d9c81ecbddb1ccac682c859aa01eddc090b8166687678f4014a4e5f84fc1c87a3ab04ac957b0209f7bc4c88f71119267184c04194780f6dfa9c1146ce5ae555","ssdeep":"","tlshash":"d8e026dfa9c04dff92b0071a6bf51c8806241a86101e94f56e6672721405bd828f8a3d","first_seen":"2025-03-07T07:48:09.934461Z","last_seen":"2026-06-18T19:24:29.347511Z","times_seen":48,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:30.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:17:30 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"4662c7c182dfe30065936bfa05f8c773\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7558\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f963bd8608a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4662c7c182dfe30065936bfa05f8c773","sha1":"d1f155c335c31be5947ef8ebf82be1eee2782fc2","sha256":"2d2d85dfc80ec4f42d12bea574d59879d269b5c06557cf888367fbfa9036fe47","sha512":"abd2530371ef02602814b0bed360225c0530615c5db002d61511bca5e8cda0d8da2bd288631ee02da5fbf952b31bd4380284dcd56838277b52654f7d13dc6229","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9svKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59L3Zwfi","tlshash":"ed323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2025-06-18T04:11:24.033166Z","last_seen":"2026-06-15T21:26:04.41843Z","times_seen":49917,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/___vite-browser-external_commonjs-proxy-B7VwcDRV.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/___vite-browser-external_commonjs-proxy-B7VwcDRV.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:00 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3wohbNluHFMbWb%2BDR%2FkEcZTVx9V5cRqKv%2FadWUchGPP1pTDNn4WKF7Z1AVuaxgQ3NUfbooV5AOrVfFjuBa7%2BR5fzfvoGy29d65Rarulxk8u765o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96438bea8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":178,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"7d05502d031499b1131a8bf613b677fe","sha1":"e4d9f899fbc7c14c0f2feb419b1008a27fbd7ddc","sha256":"70e9c7c57340d3ad9489809ccefab9c39c0befc2768170648b8947036646eb96","sha512":"4e5dbcf48f652ae16a384326505cd5edbc3a6c5c50524540134ae4a3d01745d2157e03071e9709f84f40507a6a083cebacca9e5538bf8f752c41e08e7639fa34","ssdeep":"","tlshash":"67c0804527d8dcb451771dc3c6159401d54c5e6e77f8f5d0bf0c8e51424258b6278f57","first_seen":"2026-02-24T14:18:16.787946Z","last_seen":"2026-03-14T00:30:26.667652Z","times_seen":7,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/logo.png?v=1735901226","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /logo.png?v=1735901226 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942651806; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6909cb5dd368031952afadf5/1j9744pva","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:28.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /6909cb5dd368031952afadf5/1j9744pva HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:29 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-69967ba6a3b\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: REVALIDATED\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9d2f96341d5da3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"f72b3cf283fead63feb8d768c7989d2b","sha1":"5f3a3e6faf561564ea4a81853b75a7d811a316f7","sha256":"c48c479eb86cd74ca36ddb159d34732e91ed6c3ca93c8c5c5b85ab5d817379c4","sha512":"11e021b72a126833495ceb5b2a1b032b842db9bc63a5b7f27b6738c8eeff9ad894dc05d4aa92caa27704e170173d1c599bcb532bb11b5f5839fa483bac152193","ssdeep":"","tlshash":"4c41edea5b4f1c56b22410d90dbef90ef47720f748d95892970c084272657ad2f8de38","first_seen":"2026-02-24T14:18:16.82817Z","last_seen":"2026-03-14T00:30:26.800917Z","times_seen":12,"resource_available":true,"data":null}},"time_used":501,"timings":{"blocked":57,"dns":21,"connect":8,"send":0,"wait":385,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:30.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:17:30 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"73eea1de9215521cb137b51419ba55a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7558\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f963bd8628a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10839,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73eea1de9215521cb137b51419ba55a9","sha1":"a8876b573146cd5450adc92a5450febea8d33f22","sha256":"df1d970dbd95be40780e8c006102fa7892bfe26bc989ee0c9222b089038542ee","sha512":"277849fa8a9d59430663b5c1aac29a198436731ab59bc5968ed9fcfb839f00a31e6e278c3c78547f6e1c20d94847963375de011be6493af268a7bac25cd15257","ssdeep":"192:ImwHq/LrnzPLEgIE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:s6LrnzCE1iN+xkDOy+Hp8/5Avy","tlshash":"c7224269ce504ea702c29647399f35437624429b1f54382eb78891ac0f8ec6f71f779e","first_seen":"2026-02-18T09:54:55.751197Z","last_seen":"2026-08-16T05:27:07.773035Z","times_seen":29422,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/favicon.ico?version=1751360049005","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:30.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /favicon.ico?version=1751360049005 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942650794; twk_idm_key=FiSCOP7izUupWbsIWZHDo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:30 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:58:30 GMT\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VniK5LFScgMrGJ4fr7v9y%2FxT80G8BFoizkMu9E17q%2FMG80J3ddTH5s0NT4cwk%2BdOFHoMvItVfyTbAVAX2C2k5QoafbYcG%2BMk5b9s6Um6%2Fjg6kR4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f963fd9108a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7015,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"96a66de67adef28337580739eab71404","sha1":"2b93f9d9f5ccb809e454e812f9dfa7ce9ab02b0a","sha256":"1b029ff1969f7f867742ed30370ab8f76f58f3a00c102b51740cee61a5bae6ca","sha512":"efd763159644683e2aedb05be3a541cc4792938d3755e0b0a1e8850c6240e04c3ce03e465ac5160ebea03b7ba0e9a948bff584fb163ab1db1677453bcb13a7fc","ssdeep":"192:AA9risdBVS6QwidYsQ6ujzwAzxyKjuDqc:AA9pORYsKIAz0KjYqc","tlshash":"40e19fc31979540617e9f2df05c4386ab74ca88793a2a4f927b931343ff19cda613229","first_seen":"2025-12-24T22:39:15.963833Z","last_seen":"2026-07-16T16:07:12.998292Z","times_seen":119,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-MCEY36CK22","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=G-MCEY36CK22 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\nexpires: Tue, 24 Feb 2026 14:17:32 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 150849\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":455117,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"fc7c2cce6198c0ee4a558c93122b3268","sha1":"79a9bc1e6d510d8e53efbc878d5a09d15d1d8f87","sha256":"b1d30cf0305d1c7541704563003fea95c2cbf15aa98446b2253224decc484204","sha512":"e8422f2f24fb498382417ddd578931b18961234cd9ce3f2bfd34a4775d00af32b636be74e7a8ee2dcc9a6fc1f9cc5b7cba8af8efead12e9f521ade324af6ba54","ssdeep":"6144:vMdmO7CW6y273J5wYygLIR8Nyk7pNH08pddlmOrELkS5fenMcm0v:v4uW6y27ADEIR855VrEff3E","tlshash":"12a41bce73d670269396f478503f018ba57b29a2b44dc89af189cce42d74a5a4237f7c","first_seen":"2026-02-24T14:18:16.839349Z","last_seen":"2026-02-24T14:18:16.839349Z","times_seen":1,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":222,"dns":1,"connect":8,"send":0,"wait":29,"receive":28,"ssl":219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/pageBuilder-B2dq9y0I.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/pageBuilder-B2dq9y0I.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/Home-29FquIl4.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1PPBNFjbtOkEz1SDuvK6NDUXFKoSmCo8Zqrdf%2B1Iz8NYdpunXSuhdpyDT2Y2JorOmAvTDt2U%2F4lvVzg%2BEZOfP3d31B2qe8koA7dOp2qbc2VUpTk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f964e09ab8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5676,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (5675)","md5":"6259cc18e784776243f28686559f647e","sha1":"496d6373c2ed418a693c06b59e8fb1596a8d14ba","sha256":"4d416e9394ee122dd40d960fde7fef832591e2a61405b76cfd5447dd0d97bdaf","sha512":"0081c6501437de8231861288917f6f09b3cc8f1edb90f7e4ef6a217d18c8fbfe5d7d17e73006b2cbe3fa49c9730cfa340c87358ba4d20598471872d9d1c36588","ssdeep":"96:MBkN7c2FclrCl7VxgIKekapRHgzElsKmMKc1qKyDdIxsvLlmrVCi3XMCWhn1fta2:MBkFpFcsl7V6IBkaAKGH6Ii3XM/hn1fn","tlshash":"e7c150aac20f1e6deb6b137461b41b201e5a1965c9d294a4df8c0f3f05fb0cc91ba76d","first_seen":"2026-02-24T14:18:16.841538Z","last_seen":"2026-03-14T00:30:26.770845Z","times_seen":7,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/a38db32b-8291-4d25-9aae-4bf4b6e6f300?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/a38db32b-8291-4d25-9aae-4bf4b6e6f300?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2444\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3552\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEskOIKWizVhJrvVnrMlrV9p-fmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=1041+5 c=2+2 v=2026.1.6 l=2444 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\ncf-ray: 9d2f96513ccaea60-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2444,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b44902a539b26f42ca501a8fc2eca9a","sha1":"c9156f826c8af47c13c4e95a4953987d2c34a74f","sha256":"e1473cf463a4e737486548692bef2ff33e1435ccb7b1d4d9e4428371b57a2666","sha512":"2dd9d9716c420f8d993a738149c8ed8a18bb8ee2034cadb05c3743cbab9ecb9eaabfa064be34e53fad571e80eeebdf7292cb9811a369dd67d51da327fd80fef2","ssdeep":"","tlshash":"db513db78f5778c0ec5c0e4b60017a48e401be0053f0e18caab51dd2069c629d371a8b","first_seen":"2024-06-21T17:22:35Z","last_seen":"2026-06-06T21:30:11.65097Z","times_seen":1640,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"m.m-galabet1052.com/tr/","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-24T14:17:27.578Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /tr/ HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Tue, 24 Feb 2026 14:17:27 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://m.m-galabet1052.com/tr/\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EcoqjSXPGLpr3MeFy8yO9BWL9cf8csM%2FCbueTIyx439kTPaPyyX9aMktK%2FCnj9yYPCu5iqpTrrBbBIhWA3cllnU9SA%2Fh%2FWHF13UIJK1aium7a6w%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d2f962b7dbfa0cd-ARN\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8381,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":9,"dns":2,"connect":8,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/NotificationsButton-o65atfPs.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/NotificationsButton-o65atfPs.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6fjmKGSVrXNam5TLwfTiJ2OxWD7nosHBRalPDsPiZ%2BqLbAP7NkinnsvWvxcvGhi6988hH%2BqsLcwCfPLnIeu%2FM6V6BwZOfDX3%2BlSM6mRphK9Ezcc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647b8dc8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":558,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (557)","md5":"08a269f7193f421a33016c6eba572ece","sha1":"f98e5c0bc487c3f03fdfbb4bd993b50cac6c0337","sha256":"8f46eb3bd1462cd78841335d031abc9192a7a01cbef28558bf055195edb72e0d","sha512":"c5f0d55155d264bbb76d3f2f97e7fe639bc0a05f045a962d76c6f6b0a76baae85b79a4739b5ee70821afa38188cf91a0ee243ff41500eb16073ed9314298b496","ssdeep":"","tlshash":"8ff02646a555d4741b920771633b90152437d628fe03444004fe1c9922b4029881f94f","first_seen":"2026-02-24T14:18:16.845246Z","last_seen":"2026-03-14T00:30:26.712985Z","times_seen":7,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/JackpotPoolsWidgetContainer-NDxTfZwN.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer-NDxTfZwN.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MNJ%2B57fEPgLlkAvSB0vcZY8045WVdMvIRPDa8PWfQ9SVueGAjcyth%2BJ4%2BW8Y1w0nvlxxTrEDC92hZVrGk13lbuxMoNmT12EpcCZxADmne%2B7xezc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96525d598a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8069,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8068)","md5":"ab36e42812a4569c428f821a018ce725","sha1":"69e7de7f721b25933ce5d10707ec4b26921ff70b","sha256":"97561fae024101adf53a8a3c17253114ede06d2291eeebf6cf530a36baf907e1","sha512":"09f1d5615ea33cc4fb791fc308a2a65ba12aa83fb00c888cbf2e07270a4515a4d0fe4aeac5d82393953ecfbf5ebd4a88b6ac99f3ee0524257e203f7f82372581","ssdeep":"96:qwmRVlDy1+0x0Pwtym7sOAhbwTXflhB6Qhf+WORmfJ1QGRe+y95VFb8+TjCIeFMw:JMHDWtbsbwjIAKC28e1LV1TjCIBs3","tlshash":"c3f12109e452fbbce8e948d3497f403d275f0ba9d7a500e4d0bc9a345e6c88eb61578e","first_seen":"2026-02-24T14:18:16.847404Z","last_seen":"2026-03-14T00:30:26.66393Z","times_seen":7,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/casino/getGames?partner_id=751\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026limit=4","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /casino/getGames?partner_id=751\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026limit=4 HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:43 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=600\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1000\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response\r\naccess-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=urNuhOprJLyUZ7HPk3PbsrvXUg3OYgj5yG5eIYrNJ2E-1771942653.97536-1.0.1.1-ZEwelm57.RKx0VQUu.SVFyLso11L_pSf.UpmSiwB2gXbMj33VHX6pH2r.WA0iOIv39hqQY1o08sWHy75HeAu7QbWT6XKzJdkb9U0bAiaa4.7uwBjxHWOTLlflz2cAJL0; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:43 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DDgQkr2pRm7v0Udo5qRfhGDaaFATM9le3lJCOIsi0M6WaSBNuv9o7cCCm93EDU8tUKLCXZrwz6vya4gXa1CJYGCIGdbwxQgVzMwrSvxZN19oTADONg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d2f965359ba0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7664,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1573f2f4c0e6516d5dd9eb14b3da361c","sha1":"0056f3f092822128ff53e671f11539eb6b6f6905","sha256":"c5a0b7d8e0922a13bf41311b8104454d6ec3c8a6cc43cc7002373b05794cc27a","sha512":"aba2c0f4e5b747a5eeb6eabeb9cbaa921721e0768b99540d037819717545c2dc4f0233886776b7d16568b5f083eabf1760a8a19a26ecf0cf5954598ecb7da7e1","ssdeep":"192:Iu7Y5LVbuoI5DJrYV7Y5LFLXt46QyWh85LwOfEDiv62wHUB5LLR2mR2ERzLY:+5oYa52a5bwo5XLY","tlshash":"aaf131261f48fae65f25188128923d1edcdd2bd3d961acd04efed8ba01e51c006b12eb","first_seen":"2026-02-24T14:18:16.849341Z","last_seen":"2026-02-24T14:18:16.849341Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9942,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9942,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/payment_751_accb6f2b2a5afcc0116a86397ff216aa.png","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/payment_751_accb6f2b2a5afcc0116a86397ff216aa.png HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=UpwONm2X.SrXpAPt48eBtjrRAqNSKw88TgTULxP4Ihc-1771942652.3111284-1.0.1.1-mpRKdyNciheKV.1Guc1Si0Xd75gaWpJvAb.gy0JNnEsIX3STwMTANnSioMaV.lRlTrNVNU1qN3wiW.5rzn1wnfNve8BIJbLhFsbv.3rSe_zt5dd0D1exQQmKURbO8pYT; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qT0fh5ih2Sf3yV%2FhG6PN6XZBQH3eT9HVDEDW57WIeO%2BMEigid7XTHSQQR5ebMOTkmt88stOxwXAviOzRZMZrFgiMpHMG6t%2BRcekCBXOHlHmyf3GabA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9648ea9c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/content_751_81708316ae460e2d7c097fe8bfca6077.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_81708316ae460e2d7c097fe8bfca6077.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39974\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Dec 2025 14:02:35 GMT\r\npriority: u=4,i=?0\r\netag: \"694014fb-9c26\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=85DI7qcbT8_gAvA5UmXvP4yEZaZpwz9TxEBNmoCaN0Y-1771942654.4035475-1.0.1.1-AcOJp29sH2Yw.9MAmMTUOFgfa4C62VYCb.Vqmg7ke5DYIhNGWQwKYrQNlocgqepjf86fAgHfkHgynV5ioQDXWdi7H7yEFr4qtjElAV6beMZg.fV.fbHtuGJcI2GosJT3; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ErtR2RG38DihtLO33WGBmumQKOwV%2F8LiTYahQa%2BVgT%2FLr5UuY0AbY1J2fHSCDBoEm0wV9%2BBn9ZL9wsTSei%2F00ZjCjnpquZwEuO17pDdGiIZI6meGBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f96560a8276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39974,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86013b42eae428e11372f049516b7ff9","sha1":"225a913e812a35bbd292b3316c359967757f3801","sha256":"e55c587494457c03fdc8be31a70077cbab07905855cdf253454ab76b7b069271","sha512":"524cd729a736a3cea55239e8a2cc8d1434bda345dc35a6e663552ba59db3be7adb4419ed21cfda32a1468a0dd735e910482186438c6cc119f70064e1d854771b","ssdeep":"768:IEmoxuaqs5NSF/H1M1photHZYN+MeKRlSGifuJvy2UbLWIKp8mkx+:xdxuUgFm1pmHOsMHlSms2P8mkx+","tlshash":"790302a130ad0760f79a56ebb11d8d3a91167fc149be3c782c780c5cf379fe64658650","first_seen":"2025-12-24T22:39:16.381848Z","last_seen":"2026-07-06T22:32:46.804574Z","times_seen":64,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/payment_751_3c1d9bacd4804f329243b5aa89e06109.png","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/payment_751_3c1d9bacd4804f329243b5aa89e06109.png HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=rY4CUzGCGPUGcqwIxmbT6aAVEAw3_KPhy24yK85zNUM-1771942652.3145208-1.0.1.1-dPgi_nKFiULmimO_rHz8a9S071m_yi9HNLOPNDj7PzKVju.m8utrraaP1zxCo7s1ke4L4RZ25jU0sM1Dm9D5psKN0oEivV9qFna.PfOOZ8YNAkdbcsfpHRH4q282w5V8; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1qwvCBushs07AGCCTc6ugH%2BIoROBZN3FH1WpkxSPkqFpX6iO6Ut4nXbrxLc08ckyXxP8EOsXlt5KKASurHHJD5Gqb7k5x2bgsWIMZsVTQ0gK5iO6wA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9648fac70daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/SportCompetition.BBosoIU6.css","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/SportCompetition.BBosoIU6.css HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vb8VWrYiVhTsIsBbxaFxTL4o04s4BRhqZRiDqG0565%2F7qBYUvZQgSKXEsrpxw%2FAkEU9pwHWCoeGZAMUy1dkSmsbrz%2B2M6IUSNV2rfWq6WUGwFtA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96502f358a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":937,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (936)","md5":"efad02edee4e55b438f2240422f206ad","sha1":"d60742cfaf3059f66ef2dad49acdd3a2064a57c9","sha256":"d18ce0c5668f0c2edf97cb60114f1c73c6bebf1019b934945933ac79fa45f0bb","sha512":"0850293b416ed487e3adaa59cc54bbafeaea854d10282c2ddadc27234198f98934171cf742106bb112039f6bee3263412879c2fb2ece28a360f036bd155403fe","ssdeep":"","tlshash":"1511ef2386d76004792eae162780b6fdf864540388b2093fe589532ec8ab1b71605f28","first_seen":"2025-04-23T10:22:48.846083Z","last_seen":"2026-07-01T08:33:19.558086Z","times_seen":95,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/api/public/v1/tur/partners/751/components/1974/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"OPTIONS /api/public/v1/tur/partners/751/components/1974/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-key-case\r\nReferer: https://m.m-galabet1052.com/\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1000\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response\r\naccess-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=oqeFu52VT.ajNE54dmJaomyihsWi91f9LnQezUYC0BE-1771942653.958826-1.0.1.1-Nb8QwvXwcwLAHZTMev00DgqZ4CG9zW63FErcWZBxGEf3hDxkmdjqVUSySzkkBsvXIL4foCYrBrVL4fsTOn0g8SSZ1pLMyDFxb.lkdKebZMXRnNgpxu9VaS0YKwe4Ieht; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hqCzVxVqmwG50eJ8WLjETltcaHqmaKpKX5FN%2FsiAtw7UQ2%2Bduyct970W6SjTSkwRgIwATruNy%2FKFgU3tl181kMCdQlnSHf73TbJZcm5CXRiqsMTkaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f965339330daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/content/images/casino/icon2/f272ddd4de16241702f4e06c99ae282e_casinoGameIcon2.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:43.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /content/images/casino/icon2/f272ddd4de16241702f4e06c99ae282e_casinoGameIcon2.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11212\r\nserver: cloudflare\r\nlast-modified: Sun, 20 Jul 2025 14:17:58 GMT\r\npriority: u=4,i=?0\r\netag: \"687cfa96-2bcc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=zY0BAqll7casYeuP2gFv_NLZFlZ.A_ij06ix0zxUL_8-1771942663.977118-1.0.1.1-IZIu7f3dcJ.84v4kpj63TS9gzq1uB1ywRCS0_lX80JshAotyjoojcHvB831QXoq4Z2oDDCen8MeDagIkrK4f3lSIK9UKMjeK.JxZo3l5uCwmD1KlUDdekCsd8on8hwyu; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0WVjGflmUoRiZ6iDkNbEwdsJ3X7snLVV0Duvnc9Q6EmSxQHTds7ky%2FxbFKPAC9rb4IqbzFLqoXITjYi239aBokIi5rexUTYXa9FNWcdDa7UQwp8Ng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9691dab576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":11212,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x155, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"54280fb9a08ef545ea53d71ed023ab59","sha1":"9ed7ed3786e6108e59a09531313040641f493050","sha256":"7d01a011b75eae9c1d5ba4e4f795aab1fef538368234d14e68f23f27cc6ca4b0","sha512":"1af43bec7c544199a24a6c950bd38e7ec793a956c6feb6ab21870606a0ffa1748417674b852b4f00d50a571894a3dc995189563f99ee9c287d696a6e0803a91a","ssdeep":"192:Tt5mp4qOhxVy/WO/QNMVhrHfXTiCDcYemH+ixeJ/CF2pRkkZo9iFVjRo:TPqqHOewdmEcYjH+i8IEMkZ3FVe","tlshash":"f032bf28d1584de47e31f6ddfe36aa5a01fb0b480a81e3b1d7acf2b5576b1c85306844","first_seen":"2026-02-24T14:18:16.854116Z","last_seen":"2026-03-14T00:30:26.810017Z","times_seen":7,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/conf.json?v=1771942500000","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:29.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /conf.json?v=1771942500000 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:30 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120, no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l0eTdZ%2BwIAFQMTYNCxnJSRKLLiD14hCLp3kesZFXIBvncCiOQKNo%2BN3NBfUxjAKcCZVwPXdYD2sxzyY9qykkf2ztmlhw5rCESXKcvwe6%2F7zNH1w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f963a4b1d8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17391,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5d40145525ac02c580fc6b8799985d19","sha1":"8e7a14a7fbe59e775962b77bf0fe131746d9b297","sha256":"bc98e1a6d0ada03c6cb7bda23a5fea3063260b06f0f0d24eacb7d78dbc976fa0","sha512":"60bd5f5a7718a4599f348b63610e915a1fd14170c06ce8f8ccc5f95011bde79f3b856bc694272282acf1f8f130e80353256e3a3b62b58f3c5a2f3c2bc206836f","ssdeep":"384:GVW/NrELoU4rWmnzl8mA0zNhNshT15cmw:GVWlrELoU4rWmnzl8mpzNhNshZw","tlshash":"5b72e064d9b40db302cab1b568be6147b931848b4e987c283f4c865c0f1da2f59bb7dd","first_seen":"2026-02-24T14:18:16.855801Z","last_seen":"2026-02-24T23:58:46.078507Z","times_seen":3,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/withPanelButton-NT41boAQ.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/withPanelButton-NT41boAQ.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dhdzVBgrQ1UnvDpNh2ME%2BGP7D3Sh2FzSzyuAU9kukSCgBnGombEWNk7iVJg8svLODAl2NDWfgUiiz0Ri3fYStI31ezXBc4yJdO7dYIjhcJnCWc0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647b8e18a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1089,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1088)","md5":"7b3692a2bc654f127ee28ae67bcb86e3","sha1":"c816fce5fa99f4792f594ba2d04e3f79dffb58da","sha256":"e3dbd067b82a5c53e151c8ec4ed9a2f5dc0ef79c54c705558a1dc82a926a0844","sha512":"9a255fe6d47146854aefcb1f0fd3e98ad0f11f9201bf6014a823ea2669931174c34b2f2f7b562a44752f4d2e898748fc3e8999f7ff5bbdd1683383db8bc9b55a","ssdeep":"","tlshash":"1c11f0e5f580a9b1e0c81088577b2db6719a32c9dce1159021b6c8da5fe80489a1e9af","first_seen":"2026-02-24T14:18:16.857205Z","last_seen":"2026-03-14T00:30:26.668493Z","times_seen":7,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/InformativeWidget-Cz5N_F7Z.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/InformativeWidget-Cz5N_F7Z.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zjgWB7TOeBheyCdegIqFZROsA9T4qRDQOP%2BSv2Kinve%2BNguqFWElpdFsdSJoxhmS4zR%2B0fmd58K1MPVFXwryPRz%2Bsq%2FwO9%2ByCCN%2FKKrc9FICI%2FI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f964a0f0d8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1055,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1054)","md5":"0dcae56eaa8811d0f9998fdcba186fc1","sha1":"d5b134564b22dc9154e3946c1e5ab34cbc4ef418","sha256":"d4a3883bce88c67e5369f36975081876346cbcdc0b43493f6cc90790b2f1d08b","sha512":"dd01e70a0a10fa3b67c9d0470af5ba9bf562c2b011b706794f71786f820822d3d0b0aa3140ae651edec177e839f4d3f96c318cc2db7446322a4542c8275ce384","ssdeep":"","tlshash":"d611a585e580ab3df0794cd84262608479316fe8de34d4fe446a3944d4b4d0fbaeabdd","first_seen":"2026-02-24T14:18:16.858586Z","last_seen":"2026-03-14T00:30:26.653295Z","times_seen":7,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/content/images/casino/icon2/3fe4f0a28409998585d94603a41e59e4_casinoGameIcon2.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:40.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /content/images/casino/icon2/3fe4f0a28409998585d94603a41e59e4_casinoGameIcon2.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17702\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Feb 2026 09:43:22 GMT\r\npriority: u=4,i=?0\r\netag: \"6992e6ba-4526\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=TOZy0LeFBdYgGa_gmrvCe0u6CrFwVktzEkU2ssgN7Dk-1771942660.6627674-1.0.1.1-dwy61zCzQK9_9BBNI9AlAGUOJCkggF.Z5y6V7iOtT04mp1ox6zwUjgx5e5wSXO.iYSRZudDG8iLo1cyklBfD3nCssBWi6RMD62WcggKirhK._2TNTr2d1zfce0E7tyjz; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p1BhaPY2uP3P4FNqySgOAxAWsKdoQ03ZBZh0G0kYx6PIyGyxT32wDFKW9EuKoNxqu07LlhwmMgqrqtKDJOGSjWk723ldpMCmDkmjFBLxwd1po8p3%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f967d28d076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":17702,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x155, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bbf8298650400e2fe6dd003beec4ba8f","sha1":"aee491e2318db6220c1a4c8adc1390c0a76ff97d","sha256":"bd989b6468f4afb62fe2b13299a525202a15a9aa15c2eb6342251da6c35a8f6b","sha512":"ed05619e99c3398d30af70c8692b03b1657b6052f41d5b844c14061ae5a47abae1e2c01153e8a079480a90c89d5c0edbec53294821902d45dee7d4005b86db08","ssdeep":"384:RBCUvEaNxxul5SZbr1DyjDiQiqwt8vq9tXEfhtVrbgTms:R4UvEaNxxuTShRyPiQaOvq9tXMtpNs","tlshash":"0b82d0d2e881e5ddfc762896a07bc0b5c9866449dceb1b171f274df25a4248c363ee60","first_seen":"2026-02-24T14:18:16.85974Z","last_seen":"2026-02-27T17:06:15.667601Z","times_seen":4,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/payment_17478_751_6d7482917f6db9243f9cb498a0c24036.png","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/payment_17478_751_6d7482917f6db9243f9cb498a0c24036.png HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=PeQkmJgxUc7iaub81ZCdrEjuz2L6r8ApPSzNahE8ino-1771942652.3166656-1.0.1.1-2VRqTLo15CSbMNMgGMyGz4uY54RQ9GTCSMMYNma7DQmj7BhdDf59opYrTXJnehhDbanY6lRT3osanVnz6uqj84bRcQjj.Cs9E6pcpYZEOjXvXfz__0XuOMK704Nf0XfK; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qoQNXbxaP5VLlzJnu7o4VOZeEsdX3A07gLYMn8itKga%2FH1%2FFlWoXFAA8fAbtPGH9LSw7vnCWQNGykGvZvhK5UOR%2FxmsLtfINpfqRQBq47KHanWX1AQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9648faeb0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"rgs-wss.21btcoservice.com/jackpot","fqdn":"rgs-wss.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /jackpot HTTP/1.1\r\nHost: rgs-wss.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://m.m-galabet1052.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 4I/C9DE7ZjwmWhmV8QEC2A==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 24 Feb 2026 14:17:34 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: Ip7/PYADaV5cNDvSNyB7Ffv04HM=\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ; path=/; expires=Tue, 24-Feb-26 14:47:34 GMT; domain=.21btcoservice.com; HttpOnly; Secure; SameSite=None\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fGhPlv1xyF76piElQpKpCqlLU7Z8ETLNneLycJ5B4wIIb6%2Bqi%2FvOaBypyhCxHBKm2npyVHHd7Bx2MQDbjVXmQR765JTRiCRnWSUBfGtWlvdzGYbC9XTqW%2FyTcxhjQz84JC6fN2DUib57Crgx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d2f96566f248be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=610\u0026min_rtt=570\u0026rtt_var=182\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3127\u0026recv_bytes=1178\u0026delivery_rate=6223495\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=32958498ac3bf515\u0026ts=123\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":27,"connect":26,"send":0,"wait":95,"receive":9,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/fonts/default/RobotoBold.woff2?v=609","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /fonts/default/RobotoBold.woff2?v=609 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index.Cj5ks_WG.css\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942652027; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 62032\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=emcnRdO1FTflOa2CGPquGKOReW6ttNqkDS5DD0SCaW%2FTfKjCX4BBGyuk6tdkVrCJeVG%2BQLpbeYhRZpDtc0kzfNypVZP9We4MQS%2B%2B3UK1h54v92w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9647e9708a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62032,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62032, version 1.0","md5":"5c3f2196f147bbbc3583de1008be7538","sha1":"b1d65e305e850cdd352734f7842cddfd30f08d0b","sha256":"c6213e789895a427306e62a03b1a96ac884f58957b4f14e27f8e4361e32bf382","sha512":"a0a556d7d670c7197f1daf9cc7d84b3872cbaa92f916bd092c3831d3936362ddde3e837e4330895a5d53f0783b761ded7d00d126a0a04feaea84d01d12e62f1d","ssdeep":"1536:+07i808sgDXsqfywKCgqTwnXO09CU+O2G48I5lkEGN2iBYF5cftfplD+2U:+epsGXZfeCgZXd9hAGtI56ZiF523+2U","tlshash":"2f53023e9427274226b1dcca96ece2ee16c278fb700119ddb41075ee9f32f814c83a56","first_seen":"2023-05-07T18:24:32Z","last_seen":"2026-08-15T11:25:22.013143Z","times_seen":2674,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/tr/0","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:38.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /tr/0 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120, no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3HAHxO4xpG421RF3IM%2BvfqkZFkRWwQPopUerVsh6QofCcUEhOSBuZmTdK63cRtu%2BSRmW8fho5o3D9YCqLrzZEOT4XnIc62OV0QpNmwj0%2FES05oQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f966e5ae88a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8381,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"aac85b453c27b377226c92e069d294f1","sha1":"499647d5f3a8088169e642e41b13e76b6cdb1d85","sha256":"9b5511be06a06b5760755bd374379315f090103c1f5e355000a770cf09c20ff6","sha512":"4a0dce71383e5b720ffba2b1760013457d74daebf464734feb3cda41b5b55ee407c4b578f2e7054f6d97ab47481454139327cbba16d028d0f9f3dcbc59f3dd98","ssdeep":"192:IBPHfygJtdKkZnT39yJyRiBImgKsxZKNI69Jj+gtM:IBJ1mI9kK6Xj+kM","tlshash":"b902848aa5b1a8350233612967dbf40c6f616017d505ec543a4d96ec0fc9ba881f3fae","first_seen":"2026-02-24T14:18:16.863492Z","last_seen":"2026-03-14T00:30:26.680711Z","times_seen":7,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":465,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:30.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://m.m-galabet1052.com/\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-mhx8\r\naccess-control-allow-origin: https://m.m-galabet1052.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Tue, 24 Feb 2026 14:17:30 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9d2f963bf8678a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:30.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"d9deabdd1848c34f3ab46722f446c153\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7559\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f963a79aea3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"d9deabdd1848c34f3ab46722f446c153","sha1":"ca3efc8a6fe26ae3556374b113dda96032edd201","sha256":"6a583970080e55cee4ced2fc7d5e5de94283f0e6eea428a50219b8e343ff0890","sha512":"d260841afedfa06bc864b92b64cf3bd1a323b2de447ce38cb1499cc6fccfab0da309a76814b6cfb20fae85fb5707fc72fec9996b64bfa31703445d6a933daa3c","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOrcErQYIMPdLMz9o115:kyWFW1W+fM4fFkBLMz9215","tlshash":"7e34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","first_seen":"2026-02-19T03:13:10.643204Z","last_seen":"2026-06-15T21:26:04.425371Z","times_seen":11131,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/tr/","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-24T14:17:27.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /tr/ HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=1,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120, no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nset-cookie: b1749=0; expires=Wed, 25-Feb-2026 14:17:27 GMT; Max-Age=86400\nPHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; path=/\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qYmvO6rvi66mTs2VcIFH%2FqSpT0qmAdbRQp0gLyLyxz1GlSA5xTMTganIlF14rXr%2FROk5Bjmd01hBAD2DJfnEJLLVkim32HsWMBXhYX90ASrR2GM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f962bcaf88a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8381,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"aac85b453c27b377226c92e069d294f1","sha1":"499647d5f3a8088169e642e41b13e76b6cdb1d85","sha256":"9b5511be06a06b5760755bd374379315f090103c1f5e355000a770cf09c20ff6","sha512":"4a0dce71383e5b720ffba2b1760013457d74daebf464734feb3cda41b5b55ee407c4b578f2e7054f6d97ab47481454139327cbba16d028d0f9f3dcbc59f3dd98","ssdeep":"192:IBPHfygJtdKkZnT39yJyRiBImgKsxZKNI69Jj+gtM:IBJ1mI9kK6Xj+kM","tlshash":"b902848aa5b1a8350233612967dbf40c6f616017d505ec543a4d96ec0fc9ba881f3fae","first_seen":"2026-02-24T14:18:16.863492Z","last_seen":"2026-03-14T00:30:26.680711Z","times_seen":7,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":460,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/payment_751_3519ed7bd70ac4ad8f6d42e5213c19ba.png","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/payment_751_3519ed7bd70ac4ad8f6d42e5213c19ba.png HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 27542\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Mar 2025 07:10:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67ca9be0-6b96\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=DNySZcX5PFQZLSjnBu_kXyUwr4vfp9oNm4ARM1YC8MI-1771942652.3116663-1.0.1.1-jAO.4bqhZRON7JQ4yWhF_AINRFtEF2gfLveA.hyvlybUi6A8IuvsE1VtzdMywDVKU6e8UNJ537iLv8DJI7g4Ldpl5Xoe97VMT4ahVEOl3dGwxWAznflsBcgys9pO7LDb; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dNHseP1h4mS%2FJxYY0W%2BLRofWpoCoGPJf1F4AwcGpgDvie1%2Bs%2F1wGkU4n3OVUd5lEGQtfavwXyljrrCkBxQqSqFUkMRR%2FK34nZxJNHcKm%2F%2FprU7hftw%3D%3D\"}]}\r\ncf-ray: 9d2f9648faad0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":27542,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 84, 8-bit/color RGBA, non-interlaced","md5":"cb4e27012d90c3c7fa9d3cd8bd023c12","sha1":"8424e997d17c3d50bda2a81ab4ec86e9dc11dce1","sha256":"7dd24162f2d505485f27d9de95065be69e53de754398a161b1bd62e62928c03e","sha512":"8a3f0314824a1a5985ed2426a64f21af20f5ec3efbcdfb406f8fcb7f95158f16d703a87e0c321d9d5c9930b182714905a26219bd8b25189e586ebc9cd7ef4067","ssdeep":"384:19DyAfw0Li1+Rd9pzFipMqG2fsgyuA9JtivIO+BvUA98+aDtOwO7vNB3PHy0RN/D:jDyqZklGo0v9JwUNUA98xSVB/y0n","tlshash":"6ec2e1b80f3f893416f3db4502beec1c5680f6560dbc8867718317a16feaba1c540a7a","first_seen":"2026-02-24T14:18:16.878239Z","last_seen":"2026-03-14T00:30:26.836857Z","times_seen":8,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/VerticationNavigationListGroupItem-BFd5_K1-.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/VerticationNavigationListGroupItem-BFd5_K1-.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZuThrsatL7TXjVkBPaz8l6m8XsWEDD9517LrC9BC%2FjQrPCNuQYXM6bF4wZVzUAujlrnxubGSc8Q%2BHgbYd9FZBVdMSWu9K2gZ7A3yrL66%2FUMRjBc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96502f588a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":637,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (636)","md5":"b3fa38e36f93de3948b2cea22c5f8c3f","sha1":"ffbc524fc5703948bc71d74b08c864db053df9ec","sha256":"2e2afc1d5b3f7dc050047f129e3c3a74fa62506afd2d8a7164128efa427d3131","sha512":"9f84e930ea6c03305475718a24df2b7e4640c57d1056b692ebe37efb2ae54031d7d02373fc7f939acbdfeaecd4c1c772e047155b3105d26dc70a635de23417d5","ssdeep":"","tlshash":"5bf00202d490af7cb83a54ce956e8080f9780d70eba0c4b191ed232315365e6730af4e","first_seen":"2026-02-24T14:18:16.742387Z","last_seen":"2026-03-14T00:30:26.671313Z","times_seen":7,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/content/images/casino/icon2/2288d7f4b451461ebb5696c4c221d142_casinoGameIcon2.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:40.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /content/images/casino/icon2/2288d7f4b451461ebb5696c4c221d142_casinoGameIcon2.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8410\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Oct 2025 16:07:19 GMT\r\npriority: u=4,i=?0\r\netag: \"68e3e937-20da\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=_elY0XnFZg9YrghPWwMObupE.txA1Z6tnNFbBVQQJf4-1771942660.1308446-1.0.1.1-sKkBzBi5XQ3ntO14K4rq4wwZxbeG7iJStzHpY4Zyj2vpDT3q9KAx8GvJF5i9ReLX7jJnI7IGThF.2mvWqCY1q4RvmzoWxUn.1u3FW5OvIgqW5y.JcdwxAvDRFnbiEVfu; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PvbO%2BwagPIwhrLhmyW8vEtF5FiEgOyxH8rJhf8GoMn%2BT5EAXxffozMAOsOe0GmBweiympiBXGfnosk1peQqstlGOQxSCn%2BVjXXRsRM7zfSDjPYl3ww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9679c95876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8410,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x155, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"69a8158e42bbcf01d6c00e30b030c52b","sha1":"a709cb5c0a0e61049b04dff73c24ff6c1024a9bb","sha256":"d075d4d8a8e9dbedc21e25ec0bd44010d76c7c72bad38d736c10e6daebc91a36","sha512":"5e30aa0d279a1be9fe5defed0e0543d96c1ad525d4572b20b563a98902536a9a4d18b388b97ac586c6f8019ee3394aaef348ee346c8bce155a690966253366b2","ssdeep":"192:I8Pm3S4b+HB11RtU6mIM4dMOGHf1AdxW3JI:I8Pm3S4b+B11R5jM4Cb1A7WS","tlshash":"1c029dbc350c486369e43792a0e67a2375f0e48d4add5b9b09ec568e8379cb5948b4b0","first_seen":"2026-02-24T14:18:16.882828Z","last_seen":"2026-03-14T00:30:26.796045Z","times_seen":7,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geoapi.qaxcraveniq.com/?type=json","fqdn":"geoapi.qaxcraveniq.com","domain":"qaxcraveniq.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qaxcraveniq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 05:55:55 GMT","end":"Fri, 01 May 2026 06:55:21 GMT"},"fingerprint":{"sha1":"C7:A0:C5:A7:B3:85:DE:F8:78:25:39:EB:B3:24:35:72:3A:1F:11:97","sha256":"1F:DD:0F:AE:0C:AB:24:7C:36:D3:0D:64:8D:D8:A3:8D:DB:B4:74:2B:1B:FF:3B:C7:B7:10:BF:C9:0B:9A:92:59"}}},"request":{"raw":"GET /?type=json HTTP/1.1\r\nHost: geoapi.qaxcraveniq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7HPyUmfBYC7Zx61iqg3%2Ffyhh3Q0xQEuk1R1WFbtNgURYru4aC8ZLZoXdQj0iyjHfTgxI37DpEA%2FYouLbKAHfqkKkOLCxYKRrQstLwLdmzQHgBpGSDi8%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=4C5r3sT4vMXTRfEyUxFzZLHpKZiu1EWMj_XX8Jf8W8M-1771942651.3116446-1.0.1.1-UADtay82vjqPWKncA7QkVWr5GptUa72pH1EyYDyG86oZ0rNfMhWsK.MhRGO7xxO2Tb5bW191v4FtYw389TOKkGDyQvHg1BXIq3nW9RwxMW29PrmRHjd8xBRkSfLAVCxi; HttpOnly; Secure; Path=/; Domain=qaxcraveniq.com; Expires=Tue, 24 Feb 2026 14:47:31 GMT\r\ncontent-encoding: br\r\ncf-ray: 9d2f9642b8eb5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":201,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"ae0c7b15f7b07d5287f4f56fc107254a","sha1":"dec4cfb67f23a362cf007e3414411a871f42f8b4","sha256":"e64d2e0a65cac499cbd1024efbfdd31a982c7a1d825de1b2bdcd6e4001e7854b","sha512":"74b1f188e6f60f077ee12e4556f5d70f415e2e0f89f8c513a50df271545efc9d30f25d65a4ff4acd1cf25c60d0a70fd5664bfd72608ac1b75237a02981991b8b","ssdeep":"","tlshash":"c0d02218184d8d8aae34c2882a4fa9331ab220ccc28f40c4828aae31c3d86ec3288840","first_seen":"2023-05-08T13:32:10Z","last_seen":"2026-06-06T07:02:31.879116Z","times_seen":186,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/menus/app_menu_751_tur.json","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /menus/app_menu_751_tur.json HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942651704; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: application/json\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OrzKHCNV9sc4%2FgBrJZ%2FWVE045nOgxrNH%2BMyyFcxxyZkxYvT8iWMEXhJTFOltniGWtVUawkmHCFFTKe03%2BvZbbiHZNsr6Ta3ap9y2KUNWdrkEg%2FE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96458a068a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9847,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b977d5cb35f122611cb0a3598eec8cf7","sha1":"48fcfd8e94c9d9e5a5038d6e1f97c604cfba06f4","sha256":"b5f665dff97aa272bef873c8ed1146ccaf03998374cc353b1d06fefaf0accdd3","sha512":"9790da14cd666c5f624a48598e9310a4a692d8b7a04fac5a1fd3221c1f7c4aedc07783a3e576d19d87b73428152d92165820ba7f17417265b6633fbbacc7d804","ssdeep":"192:SSkCUlkIU+koSk+UdkGkXUQklUck5TU2kJk95kek5k4krk6Udk1kJk/UUkSek6U9:Sv87ovYDM26G9W7WtIYiGgoIEBdPOTLi","tlshash":"a612e843f01c9877e3153e007cc75d5e958c549eac9d19409c4c9acedaab4abcac72eb","first_seen":"2026-02-24T14:18:16.888816Z","last_seen":"2026-03-14T00:30:26.689511Z","times_seen":7,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-6289ff8e.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"79b4aa69d45c4b43f0b31fd971b1bbdd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 472431\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f964cea589cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"79b4aa69d45c4b43f0b31fd971b1bbdd","sha1":"77122463966366aaa969b55f404af7903b9d8f86","sha256":"34b9a3ffbb7a87b04fe51abdb665588b82d1e5fba4cad27b6d6518228d20c2b5","sha512":"6bc666c4e89838ba9d62ccba15b642154cb69eb86ac22585e64e11eb0bca2ebc710c3c5cf8993a99aa85035e1ae44d566601f6b7649e7d92fa3d72a2f53f252f","ssdeep":"1536:BigMTWFu196wufn32jGDdgaOFUWbaGlDluK1MFY7dZPkx3u4V5pfYMrlSf:4nmuTilGhmPx3u4V5pPrlSf","tlshash":"36a3096ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","first_seen":"2026-02-19T03:13:10.618029Z","last_seen":"2026-06-15T21:26:04.428904Z","times_seen":8427,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d0c8092.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"77424425bd755d02077922d40a96c207\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 381906\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f964cfa5a9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5261,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5261), with no line terminators","md5":"77424425bd755d02077922d40a96c207","sha1":"9702eba70ac4506031d55a8c9cf6732a66853b2b","sha256":"1128f463d0038310bb65c71ee2bd50f52e40dd9dfc0489e127f3912a1aa728ce","sha512":"2ac723d6ab08dc1cf45141cc44966d9b0f01c892511f40148d785de61ac084e014799555bb3b574f6f8b78e9410df8c112fd437eafe0aa747babdc52b451d1a7","ssdeep":"96:zNC9Hqt7pEma7hY/rcKaJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYcLRIvgx43nVY","tlshash":"13b1859ef247b456c156225150ef3b1df33a281ca61ccdc8a66565f218784cba077b39","first_seen":"2026-02-19T03:13:10.646706Z","last_seen":"2026-06-15T21:26:04.407976Z","times_seen":8491,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/jackpot-Bj3led0W.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/jackpot-Bj3led0W.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=swilD0WuH5d%2F4ovbeLvTMNnt7KKR%2BnpDFfRea7nX2lyu2T06Eyigbz0VveXbJstqgtvLGnKCI5cEuZgg2JfsGcZDiphAi%2BFh45CCpA8p%2BJAglYo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96525d5d8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":345,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (344)","md5":"4780f7e64a8b8eb33f983e1697323d32","sha1":"871df83d5d466cbc809d01205102769680a05c97","sha256":"478f45dba7fae1924e912775ca8ab5093dd20755fc5ef9a35d38866e2b73698f","sha512":"5d9c81ecbddb1ccac682c859aa01eddc090b8166687678f4014a4e5f84fc1c87a3ab04ac957b0209f7bc4c88f71119267184c04194780f6dfa9c1146ce5ae555","ssdeep":"","tlshash":"d8e026dfa9c04dff92b0071a6bf51c8806241a86101e94f56e6672721405bd828f8a3d","first_seen":"2025-03-07T07:48:09.934461Z","last_seen":"2026-06-18T19:24:29.347511Z","times_seen":48,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/api/public/v1/tur/partners/751/components/6714/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"OPTIONS /api/public/v1/tur/partners/751/components/6714/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-key-case\r\nReferer: https://m.m-galabet1052.com/\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1000\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response\r\naccess-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=apL1UT_YnEneO7VvbhE92iAZBdJ5sOFdVeJvD1Ma6uc-1771942654.086979-1.0.1.1-BiaRg6zl6XmJTa.e2FSWS9Q8n6oA55z9GsIE18B.zPA8bLojGgHohZaqe8OKu45mcZ3onL29HolMjft2OHCrN7M7p_ianj5VGPEWkMT6hwYpTe2E8V3X.JR7AYctoRcw; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pi5Pm3DAHxHT3AKT5lPjy1bO3k%2Fik74iVNfeKMXS9Ri1ua2quuAesJeU998Ci7XzYiLKywW9OlcaAS5I5yP350dj2pmv9bNzQBRLKnfdQI%2BgU%2BeOdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f965408831a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/content_751_6dcc858d3e5c0b58203b14e5d5159f2d.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:44.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_6dcc858d3e5c0b58203b14e5d5159f2d.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51658\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Feb 2026 10:49:06 GMT\r\npriority: u=4,i=?0\r\netag: \"699adf22-c9ca\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=o10MGbmskwD1SnNcokORXf1lKcNzkKAPRKGxgV8Hg2Q-1771942664.2035313-1.0.1.1-4Bnl8EK7rJstPytLXIv66PFWIJHd4wdJvb1EU2W5BHq3F1wogFZorBV5Q3qQpwRG4vzvHVGRApqM5kv50W7aYwT_cwL02qZsT18ybkJGogolNa79l7VnykGSlceFN.pK; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wG7gmJDBpjDRsY7NHvhScgYMXSpmJ1huVGfMkdashAFvtdbKYBvwstM4sIqW%2BgUYlpwB0BWAhpf2p%2Bdqtt0Mz0rCIRFsSSbdWsK3wD6k5wodD%2FZrZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9693492e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":51658,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x220, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c28df3f32a06f1f9aab6be22b4e5b51c","sha1":"47e768103c1810b8391f565b497fe25c619b2c5f","sha256":"6242f18435218a8c3ad55cc703bed781f0ff3e661851a2056363ba9b9f2bfa6b","sha512":"ad09ae5de95d21b1c66786fa41b3f564d3d61bd0fcf93cd76c4c7b820a4b1abee2ae734852f002ef2695111bc6a743402def7ce2d110d1117ce1caf81ece80a4","ssdeep":"1536:I7ybogAKCMkP6Pvy5JchFvFgeTTLxjTXzCfg5oH/TeVWSFuis:icjC/n5eF6eflXzeg2fkFut","tlshash":"0a3301e90bf361bd4d0446aaf5fc8b8b5437f7a26c702050a547f5ba5882f36f219b14","first_seen":"2026-02-24T14:18:16.898991Z","last_seen":"2026-02-24T23:58:45.998549Z","times_seen":3,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/Firebase-RX_gUq47.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/Firebase-RX_gUq47.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m7SDh46woNTqBs8mCBDluW1w99XbUfpXWO%2F1pc3IZFVDwrl3ziB32NLx7PwyKEkcTJ2%2Fe64UxtV9CXeTg51IbB08mJ237FDZYVDFpyZ7UEX5yu0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647a8bb8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83773,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4775)","md5":"bea24ff3a318d125e93894d0405812b5","sha1":"ba6f4bcef4314f386f1d2cc2a21770d7668a79cd","sha256":"99fef500cb5d46e88a0e1708a9ee6ac7472258d19354aec53b1400a2168dbeea","sha512":"bf5c4ad393053383e74c70ee388ca93fe575c28a76ea214cf8188f3903c17781206a50073e2518be215658820fe43c90008e565969210cacc809c7d292c3c002","ssdeep":"1536:8SF/Q/m68zUcA+sh8SH1iXBVjvDphQ+Y/R5eKpsBoXYyo3kNNrMDgyJxmDaRwzev:8w/Q/m68zUcA+sWSH1iXBVjvD3Q+Y/R2","tlshash":"6783a57d7a922a3317d189ab792f50cbb319c54c390f8394741ec0e91e3e45a45faeb0","first_seen":"2026-02-24T14:18:16.902866Z","last_seen":"2026-03-14T00:30:26.774987Z","times_seen":7,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/Comm100-Bu8dbByt.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/Comm100-Bu8dbByt.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-D2kxYVnt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942652027; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uj2dqrcdu4sVcqJYkrbBzLdTRFJIHSU4ZU%2FU8cpUmn25%2BtxKSXB8p9aK2Ookw7R98ln6geI%2FKWbBw8hq7qMAOhLTgVpp%2BDCtUOW3uqCkzjvPyZ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647e96c8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1205)","md5":"b0dfbdcef43a80f50e22306be00ef9e6","sha1":"062ea378b4572ea7c546cb6c8a5fd29aabf4805e","sha256":"e05cbacd7fdd5aaac39b9e180e61302d82177ad6aa0ae712e64d0ac14001b39e","sha512":"dfc486e7a16dc11c1995c816175cf2553f3ac6f63c6f6a5f46e09d3f1a971393c91e5e4165f12ed52771bf8e8476115313a61f9dcb52ccd508b58af1bc1edd78","ssdeep":"","tlshash":"8121441b58c972b5316050e56337670133b87ad86900819102888eeabc624c3c51ffcf","first_seen":"2026-02-24T14:18:16.905416Z","last_seen":"2026-03-14T00:30:26.803689Z","times_seen":7,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/payment_10651_751_0a0c572f4424adc2f8f9fdf7d670e213.png","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/payment_10651_751_0a0c572f4424adc2f8f9fdf7d670e213.png HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=5C.mhwEoqP3HE2_wdBLtgkiCLui7fGpP7VOCyWqKM1o-1771942652.2855005-1.0.1.1-ufP6_23Kdd92SZWe9ox._kDkhmrM370SLbBj8IpOCu0jkP3S5IwT2WcjD4h4mjNUCsD5cJZ28U8EJ2Aw.HC1jm4YVHY8ZaeMf45dIUKEFU1tVBPPDXfLQZYrcViVfi6F; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JZ1cCmB%2BofkfbVHtPZTmYrNBzXnMz%2FJZy0ywu3eZljWmC2hBcLdCebSGU9UDhGInx02G7oLFa2GW1uawrZ9MQHWI8WRsVSR7YJfiNE8Cfm561gOi5w%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9648c9b20daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-3ea2c7ce.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"52698c6dc96b5f2bd13e8f921334e398\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 472432\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f964cea529cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5504,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5496), with no line terminators","md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-16T05:27:07.629039Z","times_seen":42600,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index.es-CSWu3UeV.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/index.es-CSWu3UeV.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/WagmiConf-DQswithC.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942651704; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bDmSZvgWYnGTrWkJp37bNnh4UXkGhgsIDlkElos%2BJDU4AH9le4zYErmN4kfDSyeCJR3PIq2iTAw0YajYrrtWAY6g82jTaPJ3tdwUgsQ6usKLpHE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f964579bf8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":294785,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49925)","md5":"b7da81e609f3dc33037e6b059f273873","sha1":"fe973bdf78b2c85b6a415add6b2c2cc220017bc2","sha256":"e667dfa1b572dae551aca51c4e630d9a2a8616ea7b3e56fabb733e2cfbc36324","sha512":"99367a98b8230fdb0fac493b54934a5bb781d2f413b5f85e52d530e939e77056a6897edd2912700c156b906e3a76afa526ee0e792ee0428539790d90f253c988","ssdeep":"3072:3Yb97d3bblKS+D67LBmBS6tSx6XSKPO6DProVcSrpHsMfp0DlirNY6Uco:3Yh7VbliD67kw6McXScfrMx/rNY6Uco","tlshash":"5e54f98472a7f47543d665a8943b1642f23a5c64700c902cf6acfcdebdac4499a3bf78","first_seen":"2026-02-24T14:18:16.90864Z","last_seen":"2026-03-14T00:30:26.681681Z","times_seen":7,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/Firebase-RX_gUq47.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/Firebase-RX_gUq47.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-D2kxYVnt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942652027; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FpbDh%2BCI7iuhkAMtHtjA4PUzPf%2Fw%2Fh9pEIFVaELxNPRA96J%2BQBnexOKAQ0dxvNrJ3wjBR9WE67gLCCHHa83givtrEtdGkZNO6E%2B%2FHyj0KdVbtlo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647c92e8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83773,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4775)","md5":"bea24ff3a318d125e93894d0405812b5","sha1":"ba6f4bcef4314f386f1d2cc2a21770d7668a79cd","sha256":"99fef500cb5d46e88a0e1708a9ee6ac7472258d19354aec53b1400a2168dbeea","sha512":"bf5c4ad393053383e74c70ee388ca93fe575c28a76ea214cf8188f3903c17781206a50073e2518be215658820fe43c90008e565969210cacc809c7d292c3c002","ssdeep":"1536:8SF/Q/m68zUcA+sh8SH1iXBVjvDphQ+Y/R5eKpsBoXYyo3kNNrMDgyJxmDaRwzev:8w/Q/m68zUcA+sWSH1iXBVjvD3Q+Y/R2","tlshash":"6783a57d7a922a3317d189ab792f50cbb319c54c390f8394741ec0e91e3e45a45faeb0","first_seen":"2026-02-24T14:18:16.902866Z","last_seen":"2026-03-14T00:30:26.774987Z","times_seen":7,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/css/fasttrack-crm-app.css?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"172.67.73.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/css/fasttrack-crm-app.css?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: zbjvR4XmwNBIJlxjEvxcm_sn.IUZfztx\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ygO1I4G2NQwxwLD0jx6iQJoicQi1Nu3gSk5Zlo0Rjnc4LjKBkdchb9aFAZR0NPXfnxGXNXD8D%2BOVNbkUFof%2FI8EAlTCH7DkKipOM6to6JW0VLPsniM4WpCGlJjFUsg%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 648da69bb4c2221c403be08a06311d98.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: U2teHaS0dYkDa1kkENewkDsmTqKzyTfsuUwTd9EGzkkinQLNXteC1g==\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"7906aada543698dba1005a917ffae2a7\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f964b79a1c8cb-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":27953,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27953), with no line terminators","md5":"7906aada543698dba1005a917ffae2a7","sha1":"7f00d6655894909587fe280ebf09bf57f66b4100","sha256":"5e2a69854668603fcd556f0b8a3da306e3de6d5ad4dee7a9e9a57ca998269d76","sha512":"262f19709cde3e7abb7bb6d9724437b042fe626636083b80376e35a91d1ea9b39aec82463626711cb60a8c516a1b909d53aac644f056e77929e736fed6d1706b","ssdeep":"384:cFukqharVUf5rKbHWkAB1MG4TmpcHyH3XHZw/XNPalHfI:ckkqharVUf5rKbHWkAB1MG4Tmpc+J6aO","tlshash":"78c2442302c02288ac2b892b73d50599d93ec836651b6dedd7433955c7cb77e3a6b34e","first_seen":"2025-10-24T22:03:16.572036Z","last_seen":"2026-06-19T22:22:48.441807Z","times_seen":146,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":156,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/useJackpot-DKjXUH4g.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/useJackpot-DKjXUH4g.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/JackpotPoolsWidgetContainer-NDxTfZwN.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eXGOiGSy7mxYwmCOQIZVsKQGc4e6txAtbJgLvCCxSdvlZMBliNYagpRuy%2B4X6hIKhdrOzOHgKene%2FA8Ji2GqHy4kPUUFOhw9dVmOSZrdHy6i4uw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96545adb8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":846,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (845)","md5":"afb58ee921e1c4be886fc587035b9e33","sha1":"23b6e380adf685e274ad54bbc72940658a65de14","sha256":"09d1d476fb4ee826070640869c40b7acdea60aef58308049c6ed10b17f628169","sha512":"a6e1f6aaa5c91e667c57539d974b32898e76ec98d25ffa36e0397a01de20c08c0f57dd1ebf6875c36acdf591f56662715c693825c9ebcd402acd2979c49d8f9e","ssdeep":"","tlshash":"ff01efc6408ed5fcf18a48f141728b6e233c3f35f642d4a0d29c1b5e9394c1aec25b86","first_seen":"2026-02-24T14:18:16.911532Z","last_seen":"2026-03-14T00:30:26.74642Z","times_seen":7,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/events-CV3ChliB.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/events-CV3ChliB.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:00 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=38ER9pejgdpycRyj4ulgODEn8o2ZgwO1%2B3naxYoEadW%2B5IEUyfDuOsm0KDDvWuWEScW3IvhUYskNkcX2cBn9cgx4EmDYiPHuxI7%2BdLOj8IxxNvE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f964579a98a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6141,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6140)","md5":"c8e97e9b3c7fbb0ae28e6081857c57ea","sha1":"2f2ab98679bfa34936faed846a6562a347f7dd62","sha256":"fcf378050c8338ea0414b258a3ce61043408576603be6f96232c70abc80aac89","sha512":"15d0b5abcd0c0f390a71f78ae63f9dc761df5fa5b9117e0e4edfb23b6463535f4bfcc98dac422b03e695182e145839ed025125f909ed7ea2ac47ac29bbd06e95","ssdeep":"96:rd9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:r3IM2sWMtBq6n3PzH","tlshash":"45c144ccb38574b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9e4126b78","first_seen":"2026-02-24T14:18:16.763465Z","last_seen":"2026-03-14T00:30:26.778085Z","times_seen":7,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/FavoriteGamesContent-C_c3l_eg.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/FavoriteGamesContent-C_c3l_eg.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nlv%2FUd8XwWvsjUyZA%2Bqb8BlHVsxfUDw6w43ZT5qWbnBlABVgUf48k3Pkznfs9YUCKwy8v84WqTD%2Fy2YsMfMsIbj2%2BKMyssCtAWZJiIBWz8d0YZk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96502f478a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5872,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5871)","md5":"e365f07905f12cbe0bdad32a3058c5ed","sha1":"feccde36af0efe49873368bd9e79ef92c7a784be","sha256":"7a458785e715b274a70a0fdfae4af266553a45349b322d51c4d4870e4988aa74","sha512":"ccc3b3d93bd73fa3c5e9cbba9377c2677507a576cf1201a66e4059ce3117e5484f75d3a20348b3460906f47080164b7d0858aab2fc7278b55c6d21bd99bed7fe","ssdeep":"96:RXdKDW9HyS7zwVAaSIOQ3G2j5DLzy5OPpe0IakYrA8nL21LQ+S2L4fEp+vVNSq:RNWW9facp4Nc0ISC1JS2LKdwq","tlshash":"72c1a8899008e6edfc769dc5722e9014b039078c6b6345e0f57e4e26262d606b77bfdc","first_seen":"2026-02-24T14:18:16.913338Z","last_seen":"2026-03-14T00:30:26.750553Z","times_seen":7,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/content/images/casino/icon2/662f6cbba2b4a4d883d897cce126adb1_casinoGameIcon2.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:40.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /content/images/casino/icon2/662f6cbba2b4a4d883d897cce126adb1_casinoGameIcon2.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/Comm100-Bu8dbByt.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/Comm100-Bu8dbByt.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qTUnuuJpA2i7ldQi9zETAmcS9ZtFzl06Xua38LMgQuD%2BcJ5A0sjd326Uv5%2B4WEo4Wm%2FRoqbgxag%2Ff5nujX1AD4yWOe%2B3XCQUYkWv4O394Z209NY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647c9228a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1205)","md5":"b0dfbdcef43a80f50e22306be00ef9e6","sha1":"062ea378b4572ea7c546cb6c8a5fd29aabf4805e","sha256":"e05cbacd7fdd5aaac39b9e180e61302d82177ad6aa0ae712e64d0ac14001b39e","sha512":"dfc486e7a16dc11c1995c816175cf2553f3ac6f63c6f6a5f46e09d3f1a971393c91e5e4165f12ed52771bf8e8476115313a61f9dcb52ccd508b58af1bc1edd78","ssdeep":"","tlshash":"8121441b58c972b5316050e56337670133b87ad86900819102888eeabc624c3c51ffcf","first_seen":"2026-02-24T14:18:16.905416Z","last_seen":"2026-03-14T00:30:26.803689Z","times_seen":7,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/Odometer-CiW2aCSt.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/Odometer-CiW2aCSt.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HT2KLg%2B0HRWODE6YFO9xtv3rfffcckpiz56jQ1zL188ylGIRDhMrErMGAjKhf5iDpGDXysSiSx74f6uJ3YvMiaeJ3ZS2VYnWvzQdoC88rjrtaCs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96525d638a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15462,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15461)","md5":"148d62d889282f08b4e7d20be35bea48","sha1":"7127f5c4d836f81af8862f249cffae00b25c5b3e","sha256":"2dcb46aae1004dc28f252282d778d6310e71077a683c4d8694e75a4aa90803b9","sha512":"ea728ae4daa34f5d9f39bb96a01a796ef4337ef748f2ab3de7304d929d185ec96cb429889bc0f5f65e7aba71249cf200a54f925ca4c387cbe28cc03df4093376","ssdeep":"384:wCkIkVQ3W3r9JDyuhFmPHhP/TFtPpwxw1Z:LrkVQmb9JeuhKzpow1Z","tlshash":"7f6209897962723483a371e055bf4609773b6d6a3808405db27caddabe32c04d12bff5","first_seen":"2026-02-24T14:18:16.744615Z","last_seen":"2026-03-14T00:30:26.691288Z","times_seen":7,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/SportCompetition-CueabCwd.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/SportCompetition-CueabCwd.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/FavoriteGamesContent-C_c3l_eg.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OLurW0BjWISlVhNqkAVXm%2FiNcL5nT6v%2FwnfeW6Hm9rj9FLj%2FLNIqOI5QVCGYSj16LmKc%2Bso3vSZOgJeXFEtX8TK6Z%2Bhh1xtEvXi6r3%2F54acrXTI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9653c9488a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":942,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (941)","md5":"511add06ae585df1bdd24d6cd9b78680","sha1":"b1ab2628a37282613e3e94f1001caa20488d8476","sha256":"fa10c9af8aa53f3e27b9c0e61b5ca5be91b4374c117574749529460ba5022a1f","sha512":"8e426ca5f6ed650731200ee00647f9be51d7c4db68dec8200130aae4950b89f75e0b266948d735b37482d57af18db7dd5d0c129beb4ba93a4d3dc196f7342313","ssdeep":"","tlshash":"e711404be849a9b47d6708ef231a40a9e530446eefc90ac0c14dc7462b7907bb35ef18","first_seen":"2026-02-24T14:18:16.915791Z","last_seen":"2026-03-14T00:30:26.751207Z","times_seen":7,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/JackpotPoolsWidgetContainer-NDxTfZwN.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/JackpotPoolsWidgetContainer-NDxTfZwN.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-D2kxYVnt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F3E6fTXxpJq2SKVHuM2CNeVFjBn2gY42LHKyPnx9xZltPa%2FA%2Fvv6DoS%2BNcIqA0TNftzclQ%2Blp46lm8WqwQrOroyxKJwOaxF0GGsCJLt0%2Biw%2BSSc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9653e9998a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8069,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8068)","md5":"ab36e42812a4569c428f821a018ce725","sha1":"69e7de7f721b25933ce5d10707ec4b26921ff70b","sha256":"97561fae024101adf53a8a3c17253114ede06d2291eeebf6cf530a36baf907e1","sha512":"09f1d5615ea33cc4fb791fc308a2a65ba12aa83fb00c888cbf2e07270a4515a4d0fe4aeac5d82393953ecfbf5ebd4a88b6ac99f3ee0524257e203f7f82372581","ssdeep":"96:qwmRVlDy1+0x0Pwtym7sOAhbwTXflhB6Qhf+WORmfJ1QGRe+y95VFb8+TjCIeFMw:JMHDWtbsbwjIAKC28e1LV1TjCIBs3","tlshash":"c3f12109e452fbbce8e948d3497f403d275f0ba9d7a500e4d0bc9a345e6c88eb61578e","first_seen":"2026-02-24T14:18:16.847404Z","last_seen":"2026-03-14T00:30:26.66393Z","times_seen":7,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/content_751_9d7a3472a72a545588ee02e8633f0a2c.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_9d7a3472a72a545588ee02e8633f0a2c.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24730\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Dec 2025 14:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"694014ef-609a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=kwiQJoQTAZic7XU.T143UG7DZQ2OnopP_h49_Lodp0Y-1771942654.4002233-1.0.1.1-hLqclXeASfDUqkk4l0bMNUB5bK7bsFPRBdfMO2Pouoif5xQAL.qB5urq2cCd75BIMqNvGKXUHuUENdtOX9JhuBJxQG6g2qgVBEkYuivSFo7S11DlFcNaUxLFFTnPCQTq; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7msVRtgfhIefbQt3NPiMiv7Tih6N%2FOoNvfJyJDtEWYIMzgFnBZMLNruy1tD%2B7pyPLaoKgAzFOxhOBVXtOiEOyrfyukpgX4ptiCDrbnL72DM0vVOLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9655fa6b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":24730,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a684d3e1bc93c1bd3a25d9983b83c43","sha1":"716d0144a9feb5a701d5eb48133f155c97a47946","sha256":"8b8e3b62b691c235c3aa5aa0ca6bd0eaea4a188271006aa9b8fdff49c9a06f94","sha512":"b66cfd7a78af400a5375c747bd08f6d230798eca3fb7fb7e623a10694901475ffacc21eb5c6edadbecb1234bb751d2c62f06eadc0192731abcb5422d13d18980","ssdeep":"384:pFhktnLa9HrvO+y3t9oDMTjRsENmQFyUzDm8kNRfxv/xvr5c8JPH+UlX:etLaZ/sPj3NmQ7ToRfx3lr5c8JPH+WX","tlshash":"f1b2f1045efc293755f843d01dfcee680e5441af12980c20814e77f9faa9a3ba81ea5a","first_seen":"2025-12-24T22:39:16.21561Z","last_seen":"2026-07-06T22:32:47.05915Z","times_seen":64,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/payment_16871_751_de7c5f1c9f38a86e92c7124bd5e7d57a.png","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/payment_16871_751_de7c5f1c9f38a86e92c7124bd5e7d57a.png HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=wuO7Ko7u38dYwxFB3XEiEtL.rnN_Q7kIwkkGko7F4_E-1771942652.3161833-1.0.1.1-cEN1B3G.6MVYyPfUiycJgTi3qVofLCR03nXE2MkePN38Cn_kfjUA.JVAuAssFyxBNH3mHfOXx73FtssHiW7IpXgGjm3os5s4BT2uh114hrBgpabmS6HI9ymib0rieeXM; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wd3H6rPstpGlhKWVoyJY8aA3yCCMv5tFFKKKtWX2WbDhCplC6dwUFDCLKEQ9i7FYdNRONgLaCRVl%2BX64f8csciZyWGUiPYour2NXC0BQZacKh7FHjw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9648fad10daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/CasinoGameDetailsTournaments-BFFya2ab.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/CasinoGameDetailsTournaments-BFFya2ab.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/JackpotPoolsWidgetContainer-NDxTfZwN.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GJ5VlnZ76K%2Byq2jeDxbjW9l6aealCsBiU2XFUv5mt7iu2YVQMso8QKYfVCZffifq6n%2BrohA%2FUJ%2FJ9KVyVp4Cd6uoLDHglawnyYKhYn1fyXOMM28%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96546ae98a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147492,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"89649d72be704cf3249ca9222edbb990","sha1":"b83a45046119af2c5d85d147d5573ebde8918517","sha256":"aa262fe9430c29d8644af2be09cb8a39bd9b8e7ce57992d62bd03a2c76f1e8a6","sha512":"2a80d52e848edce20c35a7fc2b1cd2fe9dc825f0490aa5209cca1170fc28ed545a8d5fc9ccd9f10a3ef9316fdf132fb6179b1fe865c78b567fe0f36c3e6d18cf","ssdeep":"1536:0QaAbO3Q29cT86MoxxUQMTAIIvSUrrkYUi+4083jIrT3yYUiQ86M8kU4mp2H3Q2+:0Jy+vJCN","tlshash":"63e319d973a892f66d8ad7f890021849787d31bf3e36d1c4c1ed4dbedd1888c5829d92","first_seen":"2026-02-24T14:18:16.920348Z","last_seen":"2026-03-14T00:30:26.789064Z","times_seen":7,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index--0Vsjbsn.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/index--0Vsjbsn.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=20sDo1Cj%2BrEco32ksrC%2BbsfC0F%2F8pSsuj%2Fxvgq0NrpQ0K94efSGu1q67AOS8JKc5eBQN72FlDJ9W2HXadMdBU%2ByT8KuLK73cQvFg42T82Ha8V%2Fk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96459a518a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157556,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2d719c5710bacabd4becb9281151d049","sha1":"a5612982969e2192acb6c509a7e0b5f13af6e49b","sha256":"b3741f6a09d34f2f24f437a1867183694a037db7bf4c41b8746857d458a5e679","sha512":"e5e3b0915ddc7843dbb0558378b74be2b8ac5f68b58b2b23320b515288dcaeac8eb4313b4b638acc4121a6ee04d5bd30c69fd8512bacd8ba48c7482f9602c1ac","ssdeep":"3072:mewaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:nwhFHU4HNwFH7MoOWexZFHV","tlshash":"59f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","first_seen":"2026-02-24T14:18:16.922224Z","last_seen":"2026-03-14T00:30:26.736648Z","times_seen":7,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/cjs-DLVaAcec.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/cjs-DLVaAcec.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbdzGviZ52VJBu4oKSKUa1UFtLPzhYZjJkD452eJK7GGy6tCVA8xMbqKXWbTpH2AtqIgPWiz5tCmMhK9SKznW3TF3MUyHNZYpPE7PqcEK%2BSxtKE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647a8c98a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19823,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14376)","md5":"766b980be9596cde74f86c7cb47d832f","sha1":"512202e84cab8669a2e03dacbfc699e57456546b","sha256":"19e2abc96254bc6723d7740eb41ab0094f67a25fa2d683bd8d1842822cf99bf4","sha512":"00e8fcfdd947f0e80ecfbf77aba9cabc84e40719495dec906c25432934c28142e329e615307fca446e23b63c422575b7d7ec9e5cc76c26df263124d2d214d084","ssdeep":"384:4im/dOCh1KcgMxNVEwZ0sygHcrUbOhMXa+V7sn9QFC4EeKDhFpApoqUzNm:4iqMCh1gMxNVEU0sy4oCva+en9q7YhFS","tlshash":"1a92d68030daa4b902ea406450bfa601f2795d1eb11af048f3ebd8d57ba555f11bbf3b","first_seen":"2026-02-24T14:18:16.800713Z","last_seen":"2026-03-14T00:30:26.703477Z","times_seen":7,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/useJackpot-DKjXUH4g.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/useJackpot-DKjXUH4g.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZkXN1%2BXYRQApWiPpzxhIyV9PG4IvIxr%2BYeTsy8PEE%2B7xClDOmAG8khA2DV%2FphObKXDil3JUARqNe2mfKLtlU1%2FUyR722rH%2Br1vIo3iIokHz1w8o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96525d6f8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":846,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (845)","md5":"afb58ee921e1c4be886fc587035b9e33","sha1":"23b6e380adf685e274ad54bbc72940658a65de14","sha256":"09d1d476fb4ee826070640869c40b7acdea60aef58308049c6ed10b17f628169","sha512":"a6e1f6aaa5c91e667c57539d974b32898e76ec98d25ffa36e0397a01de20c08c0f57dd1ebf6875c36acdf591f56662715c693825c9ebcd402acd2979c49d8f9e","ssdeep":"","tlshash":"ff01efc6408ed5fcf18a48f141728b6e233c3f35f642d4a0d29c1b5e9394c1aec25b86","first_seen":"2026-02-24T14:18:16.911532Z","last_seen":"2026-03-14T00:30:26.74642Z","times_seen":7,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/content_751_f00ad00088322c3724f224ea083d15cc.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_f00ad00088322c3724f224ea083d15cc.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24390\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Dec 2025 14:03:09 GMT\r\npriority: u=4,i=?0\r\netag: \"6940151d-5f46\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=rI2rVwJhn.7mHdLYvfZN1xhRb4J1RjcvFLCEmC1KJ90-1771942654.4057686-1.0.1.1-1lrCv_PUJdTqJ.Nn.FZp5.FNab0G3sxtZnMMugckTfeVTuE.KKz6bUjywAlC3w3ghecOSFylYKkcJ4fp3NhQgd1Ms3JG.2Id_5sypwreW50xo4BT5ZU1yBRhv4GVzfws; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kzHdBPDW3Ix1DDcY9%2FrHvEguChw25muo9xEZzSUtc3kgazgqEJ9RwFOSo04YiLx5ElydYFaQKNCmhlnBAVuddUwXS4FYLwYjG8bpQyIWmcBU17O3Dg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f96560a9876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":24390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10a343e21bbc8dd82b9a351018ae46fe","sha1":"ea31b5994a6dbc5e2c49d5f6eeaeb1c6b16df3f4","sha256":"08550d26480f3f6cf58fb6b50ba9c247d35c1eba70b6f2ca467abec7c84a19e8","sha512":"7c2cd2364f94f5a82d27ea07f251eabd2b42a03d1e2ddcb671abb80b897803941c05d8d3e2910c5fcc9844d5fb0e608c6b2063f1bf7c932bcd501efc709f5921","ssdeep":"384:lKjKORGzizM3XqK4PhCDkQcL5F0cqx1/v+zgxjfTE/a7PPY+xbyWBuPcCgfLdC:lQ1GzQM39QEkPF0cSN2zWjfTIfKjBe5x","tlshash":"5eb2e089da8861645c84f4483f4e24d7bb7816dcebaf083e978d0ee835c99b577b610c","first_seen":"2025-12-24T22:39:16.06566Z","last_seen":"2026-05-14T23:49:57.36494Z","times_seen":59,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/fonts/default/Roboto.woff2?v=609","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /fonts/default/Roboto.woff2?v=609 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index.Cj5ks_WG.css\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64248\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 5\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=arSXy3gqJI%2Ba0kSJuz9KrmQ1ZChfcYgO5CG0RWruKUUSGBachksMa3qa1AC7OkDgp%2BrTbMMERe7L5WNRBhObm92FsU%2FfNWdUKFG4DrjWt4tf8rU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f965628068a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64248, version 2.0","md5":"b65b078c2f62cb030e8faa332896afec","sha1":"d5af06e579dd5f400f803b4e24bc1020740b0b8a","sha256":"594544184c059f885e1499c36a4147c3d3b41ce4f50252ac245a3a5faea6c72f","sha512":"34c06275b329ac62dddd6eb3981ef47d022d4e841c6a2659b9c648e77caf58277c91d1aa1b1bc432cbaccf9e3a7c89e67a3f41c940637942e692c90db9d910e1","ssdeep":"1536:T4FysiYyiqM4dWrgU2Tx5hpx1/VjrHS+92eTa:T4FyPY+rEATHH/xye2","tlshash":"df5301e2be45d926afc2dbeca3bd561c210eddbd2480d11717d5eaa002c1dbaf07c252","first_seen":"2023-04-17T11:05:44Z","last_seen":"2026-08-15T11:25:22.038867Z","times_seen":2801,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/custom.css","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:28.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /custom.css HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120, no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nset-cookie: b1749=0; expires=Wed, 25-Feb-2026 14:17:28 GMT; Max-Age=86400\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1GMPwoTHuB1Dh56PaSKTIsPcf8Uo6SOCj1UGt6GAxi9JyJQuGWlPGCRMy4TbTirMkh4GQB9%2FNAeyaW7d70eOzDpjuE0WPfWJzDHp%2BY%2Bl8b0z6ko%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96303f9c8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6303,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"a3ba18ef4c5c9684f0881bd737955ea6","sha1":"ae97b0828878ce31139904e0260c109cc7a70d18","sha256":"c5be424e31012d5e3a9cb574b0c31a5046126b1266534ae39e1cad6777b50e2a","sha512":"e34fb9eeee1d771c4b2f337c8136627a35b338b0eefab9b5788158848f835dabeaec4b55b6cf5e379a413eb59ec8e734e44391f1fd6b244f91f1ebaa387e1564","ssdeep":"192:CHuigeWca7MAyWUrqXxTlXRhUiUeUhQnf:FxThXHL","tlshash":"c9d1a803f9e71640a2ab818815abb7f87e7c509787099d7d7b8077349f8a3d38131b98","first_seen":"2026-02-24T14:18:16.926279Z","last_seen":"2026-03-14T00:30:26.800189Z","times_seen":7,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d224aff.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: \"87f83aeea14051d9edd97ec3dd41fa0e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 337229\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f964cea519cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18392), with no line terminators","md5":"87f83aeea14051d9edd97ec3dd41fa0e","sha1":"8649c359a630d1c55eb268ff051d5a284ef7587e","sha256":"38a072ee28e39fadd2153244a3f0a48df473ce7d8dfe16e2f2fcbe5d9cd0bc6f","sha512":"c56e03220951ba738fa2f29bec6d02b1de5ca769f1f41c39ff3f12334b16d0a82db78487c4e4cfcd8fdfaddf4af6b923c725af335346028224efa849bc140eca","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCrGN//h6LiJq:SzP2DZSLi8","tlshash":"37822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","first_seen":"2026-02-19T03:13:10.613764Z","last_seen":"2026-06-15T21:26:04.434078Z","times_seen":8479,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/dynamicallyStructuredPages.json?v=1771942500000","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:29.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /dynamicallyStructuredPages.json?v=1771942500000 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:30 GMT\r\ncontent-type: application/json\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120\r\nlast-modified: Mon, 07 Jul 2025 05:58:30 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pXcHWk1WTsnxnDJ38DIAmEPOEPu0hKO56r6e3y21qPRIsyLzgfBI3ei5Glc5986vcBT1q5CPUmHvnAfEWig%2FJAE9i6UWAv575gStMXPJQxOby%2B0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f963a4b2e8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":764,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"61ff5ed77b867ea7b436a21eb8e5ab4e","sha1":"91488963a9157554638375ada821c4bb44b12dd2","sha256":"8329002355bc98821e6757dc86bd87104c3f79ab3fa48db2435c5d3baf0ec870","sha512":"e93a660a89166b2b4f17735c7ed67f95b3b333006596634a735da5159f605181c8a74bffe6924a82feef888aea5bab127c2aaf77685cd27efbd0d71b9d888456","ssdeep":"","tlshash":"2001493d3c10ceb4f7a08862d58167809992e576c7880c5c2cdeeb19c3ad24e1441b7b","first_seen":"2025-05-24T17:16:20.011585Z","last_seen":"2026-08-15T23:17:06.902614Z","times_seen":3041,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:30.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7559\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f963a69a0a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-16T05:27:07.732942Z","times_seen":93598,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/useOpenLiveChat-BKVG1rjM.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/useOpenLiveChat-BKVG1rjM.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ooCR55c5CK0aned7aefHd5asAGBnHNkynO2QQdM2fv5W2bWIC8Rh4zjWQk%2BMqyprEjBK8jLYj67RSoPQKnHaaC5huhRQKQTWBeAt7IAD9xrQu5s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647c9288a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":567,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (566)","md5":"61164bc70d82e24cb762b99232381835","sha1":"e8596b55e9c6fbdb38ccf855bc441d06fac11ac9","sha256":"32df63376b393a20c821f6400052db2a565e4b94a4931acab40c15e2663d34d4","sha512":"72b28c1aaa37bc4a1b407746a6b09561f5648c9e37e7790a954d00836ddceaa9941c58cfc7f7220e121e7b0a35313bd749fe47dbfd6a551fda5d1a8d7475daec","ssdeep":"","tlshash":"a2f0e18e45909e7cc0c447d1111ba5f456392ba4344ec842b53e1ccd2434c4546bd847","first_seen":"2026-02-24T14:18:16.930525Z","last_seen":"2026-03-14T00:30:26.738678Z","times_seen":7,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/api/public/v1/tur/partners/751/seo/page?platform=1\u0026country=NO","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/seo/page?platform=1\u0026country=NO HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Key-Case: camel\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npragma: no-cache\r\ncache-control: no-cache\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1000\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response\r\naccess-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=jcuW8VCrpM91ZW2FRkHuXIPINf5XDU6uNYAx6icodN8-1771942652.2888973-1.0.1.1-UCJKzueUlKdln41U6RVM5Y47rJdllNzGBnUP2NaW_e5OzJsePyo3RK3IbFYE23TS70VgOSSxlH1mlWyDYkPyfIiezp.fzgovMBpmDEgUZQLOndiSHhwumVLieoP42Hh7; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Og%2Bph%2Bn0PZjjg%2Fg9mnx3863dQgNAFDGPHTlleCuiFFEe9tqEUmWBpiZLyUTd7PiNqZKlroPH4fSHxVVw9BsQuY7Zf5cHgOHFZKscFLGRnaidmxY7tw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9648c9ca0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7671,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c3cb355e0745f8d403e214af1595e2e","sha1":"ed786d0ae61ad6adce28150c04a932c4e9bcd6da","sha256":"2b7c48aafa192476fcb639519893f40c28c1de98bd5e66b84769edc55b047be2","sha512":"1c1840626aba24469d43e66cef0893e9627c25afee6ab6a955e6cebf21946e2cf3514c9587cae3c5815a3b7b5ceabdb18cde0fc4b6d5cc52e798e14c7c456b62","ssdeep":"96:E2K/6TXWpoS1kKXplSunUVtRQl8bqOHEyj7fuSE3Ytvkeu5Jbrt:E1yTXENDplfnUtQyDjJE3ovy7bJ","tlshash":"76f10f0e37962d9f038a5fca29564d3c4fd55386fe41a91c8d63ce1e2bcd278d22ae01","first_seen":"2025-12-24T22:39:16.082152Z","last_seen":"2026-07-16T16:07:12.954484Z","times_seen":76,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/SportCompetition-CueabCwd.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/SportCompetition-CueabCwd.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H7jYwg%2BfJFJLT0IigNKlJQzjJGswrb7SbSo2UiwETz%2BY2rvXJaanb2fuq9yXXcrXHQTwo1rSR0K0CEhUoVjLTc12S74b%2Bz3UbS2yJ8GhB54VXeA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96502f518a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":942,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (941)","md5":"511add06ae585df1bdd24d6cd9b78680","sha1":"b1ab2628a37282613e3e94f1001caa20488d8476","sha256":"fa10c9af8aa53f3e27b9c0e61b5ca5be91b4374c117574749529460ba5022a1f","sha512":"8e426ca5f6ed650731200ee00647f9be51d7c4db68dec8200130aae4950b89f75e0b266948d735b37482d57af18db7dd5d0c129beb4ba93a4d3dc196f7342313","ssdeep":"","tlshash":"e711404be849a9b47d6708ef231a40a9e530446eefc90ac0c14dc7462b7907bb35ef18","first_seen":"2026-02-24T14:18:16.915791Z","last_seen":"2026-03-14T00:30:26.751207Z","times_seen":7,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/if-defined-CWaLTnLW.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/if-defined-CWaLTnLW.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index--0Vsjbsn.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bm0KeCvwo%2BAznB2sBf4KWYOku3UQ0hDPKfVQrkeTXc%2BjGK%2BTkSx9EdrCg2snmJkSJRTuyP9IA20DJj7kqBWtPI8LzIYS83hNcvuo1cJVJ47NK9M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9649ae438a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53241,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18566)","md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-06-06T21:30:11.633829Z","times_seen":639,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:30.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"0beffdc96a1a1b35b5ce2759d6d1d51a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7559\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f963a79b3a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"0beffdc96a1a1b35b5ce2759d6d1d51a","sha1":"8d9d42c92a1d18382b66ee353d3b81b8641ced00","sha256":"e27dcd41e84265874a28c43fa5780e5ddabc8cae4fa0d010d0ca18360e704389","sha512":"6c5f688f184fa65416108e0f6af9947e741b70ccce5053b318e8ed64858d9ccd6e6b2f905103bb3871e540ecfb7a85efb0503c539bb4545d6975c34aa58dc090","ssdeep":"","tlshash":"7f4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78849815afb6","first_seen":"2026-02-19T03:13:10.681687Z","last_seen":"2026-06-15T21:26:04.412918Z","times_seen":11137,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtm.js?id=GTM-\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: Google Tag Manager\r\ncontent-length: 1628\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/InputTypeNumber-CvNgktl_.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/InputTypeNumber-CvNgktl_.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/SystemBetCalculator-BNl9_0zo.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JnWmnDVpiJXAqKQ%2FD3YPUYIUPvFZvLegX0y%2Bx4ZQTyZhk8oI52wI6CIODx6WfRApLo%2BLo9aEkzS9ZoYDEcEr4D9b6C0tgRPfXsiTgAXlNRm2KXA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f964dc8d28a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1749)","md5":"6dda88daa7516dffb53d448f427fd93c","sha1":"02c1a98a45041eb0a213ada89990c5e327fcb0e7","sha256":"a8aad3cb9a61bd4ba5a36b71d8cb9d149e8363c4e3907e28e1f5c2181501eb67","sha512":"2845a24f5d2e66d36c1480e66c499b4dbe6b5dc12c8439c078be89c82f77cc81331e840a9be131c22a4a27ca22bc38787570679551139456e970950c9a0672fb","ssdeep":"","tlshash":"0e317412f1189ffe5eb95c80b6ed4010b0524a78d5d844c1f17c7c195abcdca7a53bc5","first_seen":"2026-02-24T14:18:16.790991Z","last_seen":"2026-03-14T00:30:26.696288Z","times_seen":7,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/content/images/casino/icon2/662f6cbba2b4a4d883d897cce126adb1_casinoGameIcon2.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:40.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /content/images/casino/icon2/662f6cbba2b4a4d883d897cce126adb1_casinoGameIcon2.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10682\r\nserver: cloudflare\r\nlast-modified: Mon, 08 Dec 2025 13:46:14 GMT\r\npriority: u=4,i=?0\r\netag: \"6936d6a6-29ba\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=mNvcyI7.Ec7ZxWjNPQnD7EzrC4alU9QL2gYxixsxprc-1771942660.1336236-1.0.1.1-DMtxEwiL4P0_.WG1VwnuLUgfRyYRo9V_EgbNHlNhKXGwbqpzM5cTcy8xdm30bEQrrF.Kzt20UR6pREYR4DrMVB0CwS5.leuVdX5dwh0uwpVQmAhcWnfeIh1_1T6obR_b; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2UYTTduPL%2B5zAUb5iwaygiRVWomL05HBaINUvPqS2esk8llDS%2FkDt%2FuBEYCdC7yDQ%2BtG8BOAPg4V0kuiqLNk%2BgAh7MyWp5Sw9gWj4OgQjsYcNbp4uQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9679d96d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10682,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x155, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b3fc504cd7eb852489a84e749b09a1f2","sha1":"318f5c6a8e91b8602a08640a0422393dbb874594","sha256":"8a24351dc0c0e387cbf70ba0cdd22294064b948e36d43c15af205d87b8179b82","sha512":"a1a767816a617ecb0afa60432c1c65e9192ae9431da4330f0074911d688610cff5738c4c24c01d19016587b22e910705c7bda6b3cec593727ea575e71428afb1","ssdeep":"192:nyoO644XaienXw8mBnsrCe+GCFcN9SLoTZq+gDtSU7Xd0Xe8dmGzCYDSfQj1d1F:n+6LXaHmye1FO9yGZq+gAqmxDSfQj1dr","tlshash":"aa22d05b88c17daac41ea9d072f5c53d7aa93430f17a635196f54781ff9a04c47f109c","first_seen":"2026-02-24T14:18:16.934579Z","last_seen":"2026-03-14T00:30:26.77935Z","times_seen":7,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/menus/footer_menu_751_tur.json","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /menus/footer_menu_751_tur.json HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942651704; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: application/json\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x5Wce%2BiMEh%2FReUq8ir53kJLRnRXjXhaddT%2F7J1Z34%2Bmd2r56nt6e9qWlXvW2UjQ6gYJBnVAS5Lv0FxzCtoAIydOgUKtUCmORrTHzF7SfwwQWBnA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96458a198a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6877,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6d18fe810c3252f7b60b8954c13d7f83","sha1":"ed7e2dcf447e60638f887d9e4ba2e05cf7b6c207","sha256":"f50ecdb85d77cdceee2f97f41f386a43d61fd5ad5238d838a791a3d1af182c0b","sha512":"2e9b82e605c3aab96280afc36a05bc8d5457c6f318ee54e7b5b54e7e339829909046faed28d3c6dcce730366a3f4a8cf0e65d797f484808b023d3646369254a7","ssdeep":"192:XSk2zkrSkfkmkukckpSkv6kphkcVGkUSksAkTkkw3kBUkPHkI4kWSknIkObkpOkV:XvFzcjrRpvP86Uv2lTzc6WvdFFxXYOWC","tlshash":"afe1e353f01c9477e7057e00b8d7ad4ad48c909eac5d4944dc4c8acedaeb5abcac22db","first_seen":"2026-02-24T14:18:16.936056Z","last_seen":"2026-03-14T00:30:26.833747Z","times_seen":11,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/NotificationsButton-o65atfPs.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/NotificationsButton-o65atfPs.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-D2kxYVnt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942652027; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JpdBaOg9JRnRwEnGROv9R5U6MHE%2BfPBuwo9A8P3TmNsAfYOsNt4dsZRb3Jd%2B7mQvJ7A40%2FWdObTvJPJoRj8eq3xWKP5gaaP3KmhpcWcEH7ZN5EU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647c9318a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":558,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (557)","md5":"08a269f7193f421a33016c6eba572ece","sha1":"f98e5c0bc487c3f03fdfbb4bd993b50cac6c0337","sha256":"8f46eb3bd1462cd78841335d031abc9192a7a01cbef28558bf055195edb72e0d","sha512":"c5f0d55155d264bbb76d3f2f97e7fe639bc0a05f045a962d76c6f6b0a76baae85b79a4739b5ee70821afa38188cf91a0ee243ff41500eb16073ed9314298b496","ssdeep":"","tlshash":"8ff02646a555d4741b920771633b90152437d628fe03444004fe1c9922b4029881f94f","first_seen":"2026-02-24T14:18:16.845246Z","last_seen":"2026-03-14T00:30:26.712985Z","times_seen":7,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/log-performance/v3","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"OPTIONS /log-performance/v3 HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://m.m-galabet1052.com/\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-3l4m\r\naccess-control-allow-origin: https://m.m-galabet1052.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9d2f9653cb629cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index-D2kxYVnt.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/index-D2kxYVnt.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120, no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nset-cookie: b1749=0; expires=Wed, 25-Feb-2026 14:17:31 GMT; Max-Age=86400\nPHPSESSID=b12d99abee09167e404adccc5a8194d7; path=/\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nnqQGm9GKGYS%2FhSaw9wtucKCC7%2FlhkREaB%2FkBIeM3i%2BDmzE9DsGX8nn%2FpoVqwSCj2Ee3wJypdp%2Bwe5ZxB0%2BK%2BuvPEwM56K%2Fq0i6JLdRrbSHWN9U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f964579a18a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2571026,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1081)","md5":"ac388a861f8d6f63a5bae0242663b0ba","sha1":"475ce742aba0831e672d06dbbc19c6c00c13292e","sha256":"bec81db3c415a348179e3ac4e0ccbd3cf53c1b543dc4d2075c03c79fc4dade11","sha512":"bc85239ffb9545690c3cea33ed965961a3dedc433ec43954d0a165f2118796bc573787faad5aeb045f1d03dccd06ffa30de8abbf27a9186212254052f00aa76a","ssdeep":"12288:RzrvOEpHChf7rCvbB1/0XjIcYD8JAqvlOP47LyBSHA/w9nZrO:9vOEpHChf7XjIcYD8JAqvlOPcyBSp6","tlshash":"fc25a5aa66f720319223f0390e2fd4057a29580f0d4cfd597a5c92946f8c93c97f6fa9","first_seen":"2026-02-24T14:18:16.795859Z","last_seen":"2026-03-14T00:30:26.794201Z","times_seen":7,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/firebase-messaging-sw.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:28.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /firebase-messaging-sw.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:28 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 07 Jul 2025 05:55:56 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BjyClzqSmub5Xq73AqmwgLUE%2FZBF3atRJ75jFCCKoMgLpGSoKX%2FTaIR3Xeuqg3fiNL3lzgmaZ6WQgGVE6e6SxXj6eW%2FNnqdY4lkyhK7JmghFtHA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96303fae8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"44b92a7d10cb0970ced5798c2eb1b8ac","sha1":"819f60615624f025d1256efc408d8e576a909c7b","sha256":"a87215bfd90d96fb55335ce2b2411f38074588149c9e896505cb10b250e17e1e","sha512":"75c55da9e8afbd96b6219292c91fb88e01c15d20bafc974028763227220aa042f4b761895d44b0394baae53c225e9b0c109d2eca333aad6b382951a60448e8fe","ssdeep":"","tlshash":"5121cb124be2f8231e4104c7679f32186e290d2507b0f1de61bf56b86b0a57b206bbc5","first_seen":"2025-12-24T22:39:16.149326Z","last_seen":"2026-06-17T13:25:54.195615Z","times_seen":78,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/localConf.json?v=1771942500000","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:29.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /localConf.json?v=1771942500000 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:30 GMT\r\ncontent-type: application/json\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120\r\nlast-modified: Mon, 07 Jul 2025 05:58:30 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R36h54CzLc17oMimyzObfF%2BT64fTO2sh6UwV9c%2BRYiXKS%2F84tePXQPy8GY6HpmDUbFVGFOVtYKXVAGNTg%2B4nV01qkJOlCQWfbcOG9P176cqO4Ks%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f963a4b278a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4471,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b406e9c7fcaf80e5ab91f27ea0f0294c","sha1":"54ddf99952cf9b0fabd829928125026af457240c","sha256":"a327cfe81199467e7773a331449db596ff5a5da012ace64d4ae1889c757bdf15","sha512":"50bb2149cb4177578ffd52d275d2f399922cf5dc4fe93ec9e32b840532d1dc7cbf148a136fc965a7e353fab249d5849f33dba3146a47b9f8053a574661b71f4d","ssdeep":"48:YuTyTbGhzyQnA8qA+9nIok/we+NPhwxbwPAjgCfk/wWp3Copi279lMFDQJSLhHan:xu2ByQA8qAHTwAsAjgCuE56szUn","tlshash":"7391cc9d31458cfec75eeac3788b679f3042811387982c06c27cef4c5676f19650a2ab","first_seen":"2025-12-24T22:39:16.189594Z","last_seen":"2026-07-16T16:07:12.928095Z","times_seen":87,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-bucket.pwqbfyjubdrmatch.com/configs/d212f7f1f16e55d50593214ba05a0f99.js","fqdn":"dataspot-bucket.pwqbfyjubdrmatch.com","domain":"pwqbfyjubdrmatch.com","tld":"com"},"ip":{"addr":"185.162.230.3","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pwqbfyjubdrmatch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 10:29:17 GMT","end":"Thu, 07 May 2026 11:28:58 GMT"},"fingerprint":{"sha1":"4E:5F:12:5E:D9:BC:33:B5:62:41:6F:1C:97:CB:D0:1F:AD:CC:68:15","sha256":"6D:A2:1F:6E:C6:7A:CE:91:D2:59:45:B8:56:ED:19:32:04:B4:B8:93:ED:2E:9D:A7:5E:BA:65:AF:1E:2A:87:77"}}},"request":{"raw":"GET /configs/d212f7f1f16e55d50593214ba05a0f99.js HTTP/1.1\r\nHost: dataspot-bucket.pwqbfyjubdrmatch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 18:00:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=UNZ8td.5KKqBLD.dUTEyAVFfvc8Rj15SMeV3cW1UNVM-1771942652.0857673-1.0.1.1-BOn6GUmjCvw_Zg6kOqDby7ZuCbRYkUgizaQLyl7WoNJOQ3LAq1ane3a.9i9OdZ1iTMVKmmocrzULmP3AyjgezTSChdR.sM4YglS9nuF9PoEMfgbmQYYmKnVhKlJYB8Ur; HttpOnly; Secure; Path=/; Domain=pwqbfyjubdrmatch.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nexpires: Tue, 24 Feb 2026 14:17:32 GMT\r\ncache-control: max-age=0, no-store, no-cache, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d0JXsjuG1VotGp4HCMNqZd1%2FQCSyKIbW9WWNBjafVQ7R09YzN5bj0pktARLiBFVAUD%2Bj2HGB%2BHyEGIPD9yunliie7KbLxdAh187cNN%2BaiKYk7sRDqUxBxMhU1DjIyEhXbwdEzg%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\netag: W/\"6994aca1-47e\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f96478e31dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1150), with no line terminators","md5":"c502cf55b2a3f78e648f2bf2b2eb6582","sha1":"cd87424dc2922aaedb4d7418e581a1419e8ae5db","sha256":"24f898e9c39f054c6511010c44744db4702dcbf9c75ae5cbacbca2fd852f50bc","sha512":"ae83a469460b683155b1c51ce1309db2b9324f146a6274fd33a18d7b5e2f6807baa4c9d049ae330e03917b4bb85ddaa33122250a7e286aa541fa0fc60cf7ad97","ssdeep":"","tlshash":"0221e49664d8bf7706f01ef8e3156a48b4567f487031c849529fa89d6c214c24579f8d","first_seen":"2026-02-24T14:18:16.940585Z","last_seen":"2026-07-06T22:32:46.912147Z","times_seen":47,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":75,"dns":43,"connect":1,"send":0,"wait":88,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/ButtonWithAction-CuHHkS5y.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/ButtonWithAction-CuHHkS5y.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-D2kxYVnt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942652027; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CDAiLaO%2B2YmKbOT4EAbh4ZC1sn4%2F4NoOrMQOW%2BdmRJsfCYB2FCOdO6f69aB06DIn9l8Tw3FL2BXOcHzscabuh3zhT7%2FKsvdUI%2B4hJIAdFhyNdjU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647d9478a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c631c767a7c968bbaa39c24c1fe1d031","sha1":"3904c90eed9cc55366390f12680da5557efce93e","sha256":"7b88435e78c0dec8f0f93ade8fc987372c9f529d4dbf2b27117dad622762af68","sha512":"0937ed60f0b3e6078a75fabbfcb205ebde3c24017ef7720c758db8c94d980343dd607e97a939ba616b71a133a56f16aba85e3df837c480eaa341eeacc325f9d7","ssdeep":"","tlshash":"73d0950b1455d1fd03f576f1a117c1112615ae64f7c4c541805c55403ab155ac52ff2b","first_seen":"2026-02-24T14:18:16.941918Z","last_seen":"2026-03-14T00:30:26.697832Z","times_seen":7,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/tournaments-CYk8Ngz3.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/tournaments-CYk8Ngz3.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t6hAs0Zc3AKlsiS0P%2FLUgqbGVN6D1BO%2BkFeCiG1RAMwpMCx3LJPZNRL9MnqiYrwaBeC54sHzRQX%2FqFEnXcRIJ1UZCTf6Bq%2Bk7ZJg%2Fe%2FOvUxTywg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96525d758a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1295,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1294)","md5":"eefc0a802a5aad42389101eb604e2302","sha1":"adc4c38fd60efc1b91723f2b848c2822931c7071","sha256":"84209448a17083ea474acfc2fc0fc5b75d67480ade1e5c9602a3e57cc104cbc7","sha512":"9040f290a98e74ffe77672b6d2c2605113c1a279cca62bb3274ca5f20c3fdc031c2f87fafce96104e0db8f141c6031b961d778cd8a11b9f91ae86eb6c0578de3","ssdeep":"","tlshash":"402120c8ceb01f3ab1d7d0ca1c12035225b125556fc1a650932eaff8410874b87ff76a","first_seen":"2026-02-24T14:18:16.770448Z","last_seen":"2026-03-14T00:30:26.660061Z","times_seen":7,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/api/public/v1/tur/partners/751/components/6713/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"OPTIONS /api/public/v1/tur/partners/751/components/6713/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-key-case\r\nReferer: https://m.m-galabet1052.com/\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1000\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response\r\naccess-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=GAQxuKgXrYBN_cnQwGZ4_8Sh4_RGh7F8UO6qfXbT4FA-1771942654.0839481-1.0.1.1-1cz97VkJh5mG3_xA7nqC1_t.PHsx8N45ZD4BEwW1nOx96kRQjoSndjmyw2kjze1YkbqbnSCJsFG5GM.3sNhq8Qs.XrKZmMj8PUyacvFfzGYKI7qihKUDz2omEn7ggB0A; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GjAQNe1mtzkyRGfhsuexQ2he%2FNQKPiDpViqEdYeJkzC6HuVMWFJXfJVv%2FRFyY0FY59Luiki6JhafHWhKQnTCRUx8TTiP6WM2y1S324lXOUvZ%2FwTObw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d2f965408621a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:30.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"b057293b718ae7060a9acc593ff83f67\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7559\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f963a79a6a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":324696,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-06-15T21:26:04.431869Z","times_seen":12669,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/tr-CoUPPbe1.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/tr-CoUPPbe1.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-D2kxYVnt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942651095; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:00 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=23Hx08XoT%2BY5MKEjsKUpMk287AgSZyO8had%2FOezOktmw42qaDUFA9BVMqIktYfuHGnlQ72LRDi2%2BWMJBuMf8wyBYIJaoL6mF8KjWFr9KDSsnXPc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9642889b8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1755,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1451)","md5":"7904bd6023589e24faa32d1e3809a4d4","sha1":"ee287eab3a4a9bf35c261ebb12679ecf6866b2a4","sha256":"86188ee225a389430fdbeed8517fd4744290b376f5b4dc20ab757cb5cf137063","sha512":"c9f9f55d4dc662c740472052458063aef9f11ff00fb185d8cbbc6f01577caf5afcb7ef54a4d7363b42f5efa0e8c2eead2c4d23690bdbc856a8f986c587e9e469","ssdeep":"","tlshash":"cd31c68aa92fa6738f5c044b9c1c2744594c1b50f59dcd306fe8e4912bb0dbd01af3b4","first_seen":"2026-02-24T14:18:16.746924Z","last_seen":"2026-03-14T00:30:26.709187Z","times_seen":7,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/menus/header_menu_751_tur.json","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /menus/header_menu_751_tur.json HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942651704; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: application/json\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120\r\nlast-modified: Mon, 07 Jul 2025 05:56:00 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NRqiiXwJ9HwjkwDES%2Bo7FLPNTd%2F3zSciy%2Fce9LHPsJn4s6Vw2wsNvjjd%2F1y0gMKFIMKtkwCEzAcNW8O8BKIoiGCbKWPfSrm5w%2Bz%2BVGG0egBd1WI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f964589ff8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14114,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (14089), with no line terminators","md5":"9955c3fa6133de1bb3219fa055d6502a","sha1":"d2faa37da38ff461d0810e1081aa73920a00b000","sha256":"6b51bec85313982e6f2f179de7fb0b4b5a5a01b3b08ac3227bbc641e3ad48aa8","sha512":"446c8b0075e989e2301a0b61ee7d9d87a281e9e5f6fd9985724c07831952254bf2732fa6f719f07f4dd1d59418dff36e6e4d1bc8369839239be9cac4216d1cdd","ssdeep":"384:MAx3gv/mORzfFn0FDvsoTiHzsg//xfwm4vMf9tEsISHZWvAhIGXuCcG2eV88eT:MAx3gv/mORzfFn0FTshHzsg//xfwm4vr","tlshash":"4c521543f01c9877e3153e0078d75d5e94cc549eac9d1940ac4c9acedaab4abcac72eb","first_seen":"2026-02-24T14:18:16.944286Z","last_seen":"2026-03-14T00:30:26.688631Z","times_seen":7,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/pageBuilder-B2dq9y0I.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/pageBuilder-B2dq9y0I.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=giniDX3TbrzDsDXK0ihlSZUQxmwLcahreHNXsqQtfK8GaZB5A7AYcEdodab%2BBjNiOKzsH1nCudZxTpc05yHWJQePfuqApQvquNTz8BLi1tKfXic%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647c91f8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5676,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (5675)","md5":"6259cc18e784776243f28686559f647e","sha1":"496d6373c2ed418a693c06b59e8fb1596a8d14ba","sha256":"4d416e9394ee122dd40d960fde7fef832591e2a61405b76cfd5447dd0d97bdaf","sha512":"0081c6501437de8231861288917f6f09b3cc8f1edb90f7e4ef6a217d18c8fbfe5d7d17e73006b2cbe3fa49c9730cfa340c87358ba4d20598471872d9d1c36588","ssdeep":"96:MBkN7c2FclrCl7VxgIKekapRHgzElsKmMKc1qKyDdIxsvLlmrVCi3XMCWhn1fta2:MBkFpFcsl7V6IBkaAKGH6Ii3XM/hn1fn","tlshash":"e7c150aac20f1e6deb6b137461b41b201e5a1965c9d294a4df8c0f3f05fb0cc91ba76d","first_seen":"2026-02-24T14:18:16.841538Z","last_seen":"2026-03-14T00:30:26.770845Z","times_seen":7,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/InformativeWidget-Cz5N_F7Z.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/InformativeWidget-Cz5N_F7Z.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-D2kxYVnt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NceJCe9YqmeHUcST9IjoFLUDD8jmoR%2BwiZC6FrhjWusBTbZS1ZIEQDcllaM6o3yGrl7k%2B2dINtjfjGyGab%2BJ3a2PYzPjsLuK%2BTExbv0SuNHZD5M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f964a0f158a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1055,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1054)","md5":"0dcae56eaa8811d0f9998fdcba186fc1","sha1":"d5b134564b22dc9154e3946c1e5ab34cbc4ef418","sha256":"d4a3883bce88c67e5369f36975081876346cbcdc0b43493f6cc90790b2f1d08b","sha512":"dd01e70a0a10fa3b67c9d0470af5ba9bf562c2b011b706794f71786f820822d3d0b0aa3140ae651edec177e839f4d3f96c318cc2db7446322a4542c8275ce384","ssdeep":"","tlshash":"d611a585e580ab3df0794cd84262608479316fe8de34d4fe446a3944d4b4d0fbaeabdd","first_seen":"2026-02-24T14:18:16.858586Z","last_seen":"2026-03-14T00:30:26.653295Z","times_seen":7,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/CompetitionDetails.BjuLG7G9.css","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/CompetitionDetails.BjuLG7G9.css HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x0fL1uBBs3a%2BkFJvInP8lXhf8Z%2FP1hvgezp2nIVuNTHEvpYGBmrI515LtbHTTpDSIiQNri0EVKHRAhA7%2FrF8UHwYe68xNw0MTyZbscroaVQusMs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96502f3d8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1908,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1907)","md5":"bed64140e8b43c7d355b982bea74df80","sha1":"9cfabe6307ac01a860167ddbdc7d936bff38b3ba","sha256":"ac9b415b7559f22e70af4e7cb637484c37905285ced75aa9647bff899d27fb98","sha512":"4ba955042cd97d9b28dabab64c5a582bd12a67cc721c52b0d62eec22c96fca91429a8ffa0ce4e18b426016b19de0631d4f443dc5731ec9bd41bddc9505b5e228","ssdeep":"","tlshash":"ad41a082570625bcf93381839fe9ce9ba065b8515c70c695b5108b314de3bab6427fbc","first_seen":"2025-04-23T10:22:48.815306Z","last_seen":"2026-08-04T13:12:00.038922Z","times_seen":842,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/PromotedProductsWidget-BQqw5cqG.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/PromotedProductsWidget-BQqw5cqG.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-D2kxYVnt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9SSecjsl5Koxj6N2Zz8xlrvX3ppgIgKHAy3X4ccDf8pJeMBamnMyS3qQ6MAE1gyIV3%2FJJIASisk%2BVhOLxtik1DWGBaghjL12WJr%2FC2mw6F4sNc8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96525d7c8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1531,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1530)","md5":"8be677c88a0f6f8b371a2bef29c2c822","sha1":"decebf87286ee5814aaea2e28e762406943fc9d6","sha256":"298cd0bcf516e543afb74916f85aa3adbc521e4498aeefbfe1cedeab998cf1c5","sha512":"a5daac026612d66474c6cf031423dc920d0aa0408e5a49bb731ab62b8ea647e8672135073a42889ac77019eeb6154c348a8999416fb79b6e5ba52783ab4a2875","ssdeep":"","tlshash":"21310082d93c927ee27a04fc125aa0c939067d28dde2c4b480a46d17917d819ff45eec","first_seen":"2026-02-24T14:18:16.760208Z","last_seen":"2026-03-14T00:30:26.804421Z","times_seen":7,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/FavoriteGamesContent-C_c3l_eg.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/FavoriteGamesContent-C_c3l_eg.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-D2kxYVnt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NoFOiKGZsAxj%2FVORZ5XXFymq5c4L%2BxuiphhdjvSZIaXG0snqV6LbkwG9W%2BheZEXWlSxaD22F7o2%2F%2F%2FH%2BI1wVVS0zaDqVCNkEKarSWhY0cLrBYF0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96533fcf8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5872,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5871)","md5":"e365f07905f12cbe0bdad32a3058c5ed","sha1":"feccde36af0efe49873368bd9e79ef92c7a784be","sha256":"7a458785e715b274a70a0fdfae4af266553a45349b322d51c4d4870e4988aa74","sha512":"ccc3b3d93bd73fa3c5e9cbba9377c2677507a576cf1201a66e4059ce3117e5484f75d3a20348b3460906f47080164b7d0858aab2fc7278b55c6d21bd99bed7fe","ssdeep":"96:RXdKDW9HyS7zwVAaSIOQ3G2j5DLzy5OPpe0IakYrA8nL21LQ+S2L4fEp+vVNSq:RNWW9facp4Nc0ISC1JS2LKdwq","tlshash":"72c1a8899008e6edfc769dc5722e9014b039078c6b6345e0f57e4e26262d606b77bfdc","first_seen":"2026-02-24T14:18:16.913338Z","last_seen":"2026-03-14T00:30:26.750553Z","times_seen":7,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/content/images/casino/icon2/f272ddd4de16241702f4e06c99ae282e_casinoGameIcon2.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:43.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /content/images/casino/icon2/f272ddd4de16241702f4e06c99ae282e_casinoGameIcon2.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/LiveChatAdviser-u-RpAaJi.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/LiveChatAdviser-u-RpAaJi.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l5Me%2BR8P%2FKD4uHqilTGtuYl8dMEamfwL3PpqbkJF3QYEo6d%2BIeYqbbTpx4tD6uTHZbkemMTMsEn9%2F7z5q%2FsI1rhYV3kns43KGCJdtLkB5zbdAVI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647b8f58a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (861)","md5":"f2beddf65e1a86655ac4778cae74d183","sha1":"358304aca6309a758f5f410865a6f3cec2ea40e7","sha256":"0acc27d5a07e3c22bde012cf7d28e683ccff5a3ef76aeec4a8f4ed3cfd248027","sha512":"62c7484c2b340ead12a990702cf311ea533f2f2fb2ac023721419aacd3fe1e6ef22b3eafb7f21520b0cae41a4487d3972071342ac1f3bf09266547fb68344d0b","ssdeep":"","tlshash":"9c11e3e5f086b7fd567a188ac76a2443300a4ea4e17d0d76507e19505e6ce06d249ed4","first_seen":"2026-02-24T14:18:16.947873Z","last_seen":"2026-03-14T00:30:26.73776Z","times_seen":7,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/media_751_23fdaeb75575ac96860163155b1dfead.png","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/media_751_23fdaeb75575ac96860163155b1dfead.png HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 6584\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Jun 2025 12:47:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6846d7cb-19b8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=CechFvDP9mVySkAne5y9NHN1Wv0NGePW.yZ87PnGPQg-1771942652.2806838-1.0.1.1-1xNA8hcfzQh8MxjvFUcU7XBe3vxwVjmIxIB68ucUtPpEOaiullrxwC3nhcUEC16hevJMzVcUv5fxRnT7f8UDX00zcnucqlk4LF7VoTFZa3O8qDkDCxjdFM8xc07uXKyb; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4I8YWuG%2FaeO9z9C1MRrBPuvSs6i%2F97x6RjfpQASj6BXIzND2ti%2FPbfOQnxldbxfHsDnwS1k3nfaNE2dg6ZNH1hvCbnpfp%2FdLXiub9nZBdhI5IJxm8A%3D%3D\"}]}\r\ncf-ray: 9d2f9648c9850daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6584,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x85, components 3","md5":"559cbce44f3d46175d8bda83643c5c51","sha1":"1ec630cfea4bfbadbd0850d82103afed2a520dbf","sha256":"cc49e1d8adb41c193da4da1984897c8c8fabee0a66b293f2324da85adeeeb205","sha512":"10908ebe510212d177e5c5cc2d22b8d27b6e396cb1b638963f5e42bf2292a33d8f6fb296c58f98ed7094fc0e856d4c5a23756e99103b93a12f30724e1ae96c81","ssdeep":"192:0uAF1JNTNij/Ukr8QpBX/GHZ+bPyrifFx6eY:ZYNg/53XTgifY","tlshash":"75d1bf147c362a346cf6cd32c0855990a8cb3b6b43f695496141f6c835c5bfa8f41585","first_seen":"2026-02-24T14:18:16.94948Z","last_seen":"2026-03-14T00:30:26.839579Z","times_seen":11,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/payment_751_6fa8420771b9b5987afb582ca45eb6bf.png","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/payment_751_6fa8420771b9b5987afb582ca45eb6bf.png HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=9dTKz2pKgFWuygDWzFJnnFXRTg1CXi9ZvobdwvGix8A-1771942652.3211157-1.0.1.1-np7mb_YjB40q31ewUH93l67AlOafyPq3GtDfhJjjI5BwlhqDLNLXAdwb0ACeHy2Lm4ch34UspJKdMb.RWakWL.JQy1setBtFWY5B46nCPQwfkX91dGNkGDtsdImY7WNZ; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IT1DzeUDFzX8Zl2QiiJf9nmk5lxn6NLcffXdbOpd7Lyw%2ByMiZ%2FZ298%2BepVW7MExTnxUEhVP3tmc%2FCLWIbk9Q2dQBZK4jIPkKBeM5qIh2ftD72iZuLQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9648fb140daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:30.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:30 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 7559\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f963a99e6a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-16T05:27:07.803694Z","times_seen":93626,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=6909cb5dd368031952afadf5\u0026widgetId=1j9744pva\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:30.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=6909cb5dd368031952afadf5\u0026widgetId=1j9744pva\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-q0l6\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-35-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Tue, 24 Feb 2026 14:17:30 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\ncf-ray: 9d2f963bf8668a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3911,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e647fd7b180893232236d2d139482ef2","sha1":"075d5d684ed296f00ccc222d8a3c13088a78a445","sha256":"45662103b4062f69ea5ac222661a0eb6f18fe7d226ca71811421ad1eff734f25","sha512":"1d849494bf77fff12c594b3ad9700e3c9ad2521eb14d9ee6425e9b02c76c091d59b139be679509e85015c9df2098b8709ae4433167b51cc30c33a3a6d7355b80","ssdeep":"","tlshash":"848123354a16dd7de3c9428361de3a27f41ea163d2c49a2dd0589e3893fa78e235131f","first_seen":"2026-02-24T14:18:16.952113Z","last_seen":"2026-02-24T14:18:16.952113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/useOpenLiveChat-BKVG1rjM.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/useOpenLiveChat-BKVG1rjM.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/Comm100-Bu8dbByt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RaW%2F3b9i4b2A1bDJd5D9cdo%2FXQlASBzWF7eZbAVlNNeHEASVYQNNSeHTCbnqztXhxpi3psBGnWhlULJ%2FDgj4tvI3MrBpEtsO%2BuP%2B89GAxhCiLwI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f964e09a78a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":567,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (566)","md5":"61164bc70d82e24cb762b99232381835","sha1":"e8596b55e9c6fbdb38ccf855bc441d06fac11ac9","sha256":"32df63376b393a20c821f6400052db2a565e4b94a4931acab40c15e2663d34d4","sha512":"72b28c1aaa37bc4a1b407746a6b09561f5648c9e37e7790a954d00836ddceaa9941c58cfc7f7220e121e7b0a35313bd749fe47dbfd6a551fda5d1a8d7475daec","ssdeep":"","tlshash":"a2f0e18e45909e7cc0c447d1111ba5f456392ba4344ec842b53e1ccd2434c4546bd847","first_seen":"2026-02-24T14:18:16.930525Z","last_seen":"2026-03-14T00:30:26.738678Z","times_seen":7,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/api/public/v1/tur/partners/751/components/1974/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/1974/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Key-Case: camel\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncache-control: no-cache\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1000\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response\r\naccess-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=yzsg_5IMMDJ5ep2GiNRBtaKYnVgbXBKaIiCFyOw7yVE-1771942654.013033-1.0.1.1-aHi7Th_SH9SzIM6WAOsOUQuLOMXrDq0tXxXYKudb.2uBxGlpBksl0Q4B0xymmSuOxMaJy4TyNQMK7l1QOSXU78SFxNgqGOzqVUQd_c8z7v9I2TG0._J0o_NhHyMIIkbL; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KtKYvzywp2PqedE78dCQomtvXTOgXFWaTrJpBWl4tnpM6mUxvh9OWggQ8ZMsWAfoqj%2FVToIIGD1U%2FBCWrIuwK1%2F7lVw2ec3Vf8xQ0pJ%2FW4aNFj8J%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96539dc41a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":12092,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (12015), with no line terminators","md5":"84385071e7bfdd2ef09220d21a7f90df","sha1":"6dc0164697347d06e71ba47daf7450e34f8b15a4","sha256":"af1d7d087e0861775916831f59d67dee034b424e5696a4bb26734f461ef63de1","sha512":"dfc8f94793ae4a1be1b6ff3d4bc20db81ea03f7a48d498092b0f1503ced7cabbcd0ce70aa4553c6142bcecada485ebdaffb653f58697f47351acfe9e005fccbc","ssdeep":"192:EW/YKaCB/sfh9T/p4L/6Ko/Qo/jjg/9NJ/px/P//C07+/T1/Mz/w+/1Qh/Ume/Z3:JYqhsp9jpO6tQIjjw9NZpxPHC07OTNMH","tlshash":"f542ed23b02dddba5b443b40b4c3394ac99d5446dc0e9a70dc498f8d92ea62ec6e33d7","first_seen":"2026-02-24T14:18:16.954201Z","last_seen":"2026-02-24T14:18:16.954201Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/content_751_d74a4ebe29a311acd768d7a041714545.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_d74a4ebe29a311acd768d7a041714545.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30648\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Dec 2025 14:01:17 GMT\r\npriority: u=4,i=?0\r\netag: \"694014ad-77b8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=uhkzaklszVyWqPFHcBP4CvOTN9Udq9hQb1O7hA.y26E-1771942654.3968482-1.0.1.1-UlXA.nM.UwSOV3AeW58NkKFY5Rynggto.f25zaFwaBx1R.MmaQhVQRi7k.kY5MsJJQIZypBr58WdTFga2JIR8vcbyZEvlHJcE6Dp5dqedjhoPqR7ktL8mPeoS50bTBM5; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3XseKcpvtw8L0YDBQbqnQ%2FyXA5iwcy3D9QRNmxJUYqK6WyLRMSqWtSGzyves870P8RIXKegz1uUTrPRykzDiEs%2FuFxSaxNrLWLeGPd7VMpp4b8kkmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9655fa5376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":30648,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e44c769c8b50867b3c5a5f351efe25c","sha1":"13946ee2cd8c9ff6b74ce804ffc950b06d3b096e","sha256":"ba8112aeb4f696d5320c61972a04ed6a623bcab169a49bf3e4c15309c1b8e013","sha512":"26c9ce08f0b8b8059777d5dd806b09613006bc84cedc0ff3ee4b8c01e3e1b07f3a5e06a698ba2674a46128901ae5dfff43ba656124bb8a6ce9b135d6008fb378","ssdeep":"768:wj3t8z10BKltBMdANvhvUsEDcb4f92KK4cduloRN1YfSh2+:wjY10oVymvU9Dcb4fkN1Yfy2+","tlshash":"0dd2f1f45e14f4d273822d3b6783643b64a7c0ff2e9b5db1279a007d9e36859540e28e","first_seen":"2025-12-24T22:39:16.17862Z","last_seen":"2026-07-06T22:32:46.729407Z","times_seen":59,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/content/images/casino/icon2/44f5276b0d1beb048f511b015bd80b99_casinoGameIcon2.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:40.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /content/images/casino/icon2/44f5276b0d1beb048f511b015bd80b99_casinoGameIcon2.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6702\r\nserver: cloudflare\r\nlast-modified: Tue, 15 Jul 2025 15:24:54 GMT\r\npriority: u=4,i=?0\r\netag: \"687672c6-1a2e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=uRbpKjq0lFryZkKp7cHwu8CHLr97htz1J7omvDrqqt8-1771942660.1351538-1.0.1.1-XOBw1Lj9yKBQo.XTWIZXXFDy927Lonv1P3jJc8E4ic9ebfK0x0JleIOUwUZa8cOgW5yBSEQ8oG.yKt7iq3ahrrO7mpMW97I8F4vRS6T4HZzuTjCObfX6SjEEA7W.h0VN; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LGtpl3MqGSL8BztDXPcOoX3mnDd4fGFEDpHCOpVJggsSzfN6JozrhiYyk7ZeFBQMxEjY%2BkuD97JV7QkOqzqdjHg03aOIcZTHB6OVnYTe4nLavGauDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9679d98076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6702,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x155, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"118d2b916719fe09063d8cf170326fb8","sha1":"70f3d9e2b1f69099f211373585346ebe616a376d","sha256":"94365245c587f314c16487cdd62997670772b3b87f7aef9fa6bfc9bb4fb6a666","sha512":"e823b7ce449219ec96629a55189deb3445e0bbdeedcf6dd1e19ecdaf5549b4f7f15b04866e1a9add56fda2dbd8da5c15d1f336169271fad535b0415c6da95747","ssdeep":"192:NduUMkQqEjbx4TVBI+m+57ZMUxk1n75uZFGbG:NduUMkQN5/+dZZMUxk17YT/","tlshash":"ddd19ed187e7362d907abf24a3dfa844675a480c4c89f65e74c6fdf9cc5626521083d1","first_seen":"2026-02-24T14:18:16.959141Z","last_seen":"2026-03-14T00:30:26.789688Z","times_seen":7,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/content/images/casino/icon2/eaae847522af752e884a744ddbe6682b_casinoGameIcon2.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:40.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /content/images/casino/icon2/eaae847522af752e884a744ddbe6682b_casinoGameIcon2.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11118\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Mar 2023 10:37:13 GMT\r\npriority: u=4,i=?0\r\netag: \"640b0859-2b6e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=r70MCj7zEqVRO30DU0WQFDaquZ7WorsfoZwZk.7NjZs-1771942660.6593354-1.0.1.1-ZqMa.8MyAy4RfjIp4AhO6zxn16vgbFiuofBHR0w2gC7qwZHJTfh7Qbgev4PzPChUofD.L1h35623AdmoQ1cnM57xiuW1JPEwWFmFviw3kcDPc2n.h7.GTA4hS5q1HbrZ; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O8JyRJV0pMkt0pEkTElYs6FHY3mWMBTiSRrHkNsAN2BHNWh%2FW0xBYAhqZZe2ay5gzZLVFHMZbtHBbIpHofk6GfBAa1RoXs6T28W%2BGdLDfQSN%2BoZ3CQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f967d18aa76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":11118,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x155, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d46405decc0a4bc9a776290a78674ac6","sha1":"1ac22f854f4f1185a8ae592ccac05845d2d56ded","sha256":"5ab981c3a67c7f45b74e7226dc6625e62f96f454ee2bd162cd25b6be979bcb6b","sha512":"1b9633e027a34ae523fbdbc3686f0cb94af14fc8a3d633a6ccf8c44c0eb265a23d05dd353d86a72902a2c63bf5258d590cebb74107fd463cab7c7b66929ad79e","ssdeep":"192:NeIKMknZrT0GVKl0PssD1zuEI/QuLa2TIZDu0LVbjTgZqZ99zs1Xn:NCJZvHVKl0US1iiuGFNVbjfv9g1X","tlshash":"3432d156f3b3be478cc59667c86b19f89a03da1c38640d1345bac50987df3f822551f4","first_seen":"2026-02-24T14:18:16.961631Z","last_seen":"2026-03-14T00:30:26.740984Z","times_seen":7,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/lodash-Ddm1dqL-.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:29.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/lodash-Ddm1dqL-.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-D2kxYVnt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:29 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:55:56 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2BP2jG4OtRcdwDUuHWCVkmNBehEAFqDJ3OLrNENIiD10sliK%2BTsvBkGFibY7TqYW4nDFUJBHjqTX%2BCnVaVEJil%2BraMGwUtd5%2FPcuLHEFzP1LiOE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96376b388a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":215924,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31254)","md5":"1abd4f2fdf33be952794d5e7949c86cc","sha1":"17f59f1c970fbbb98551ae3282f1f3762ec0df25","sha256":"5db2726c3d8c8d1460a832d34da738d4681e678ab6cb811de316050a18cb2cfd","sha512":"aed7df1b43c52a1bfc09cea4614a5678ab9b625c9678a47f3433c139c882dd6ed01ca664967b5e3171f59a611bb6d9fa37124c1ba60f58bc09c3849e29c5b1af","ssdeep":"3072:pcOzANJ/Y/ysfRPlb9pEh7omhBgcGE3Iq57gLtm4cqxtEIcHaCJ:plyO/pfRPlb9elgsT8LtmmRCJ","tlshash":"ab2481c835d3f0a19366247400ff044bf23dae65a88cc444e296e1ec7db996d9277ead","first_seen":"2026-02-24T14:18:16.963859Z","last_seen":"2026-03-14T00:30:26.729529Z","times_seen":7,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets.json?v=1771942500000","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:29.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets.json?v=1771942500000 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:30 GMT\r\ncontent-type: application/json\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120\r\nlast-modified: Mon, 07 Jul 2025 05:58:30 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l7MaHA9LlEJOSeTPlOiZ2Dy1msh6fMXwNqwohwiCUfvtBpVDsAlCWnLJw0E8w5e%2FkPOjHRb%2FeMpuI7euyrETURCVDVMJVbzfOR%2BdGhIn%2Fx8aD18%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f963a3b058a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"997ee232ee595fe2f174aa6abda798a9","sha1":"b0c4996243ec04d0cf802321f2c3dc77a4e683ae","sha256":"95d3391b3af1d286ec38e83011be93bb4085bb9c6891b04a55ad556667a22ffa","sha512":"523a8c00b6a967cd4f538ca026c82e4b45eca2d68cef1b28683c885ae2b648cb13a9d1f17243d434c8f8f39bcb08261502947cebb230907f87a57ac71a42d90f","ssdeep":"","tlshash":"efb092ba1e49c0a01340e08c0e052984f000d1a18eaa02da1c97813882e03368582b0a","first_seen":"2026-02-24T14:18:16.965845Z","last_seen":"2026-03-14T00:30:26.694499Z","times_seen":12,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/AppSettingsButton-BANHATFV.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/AppSettingsButton-BANHATFV.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GHh4EaeFjwP%2BMHpxOqsWHy99XtcJYh%2FaRzm89%2FCU%2BJTVopwZs3goQK5u9pX8VqJHX7i1D20U%2FKl%2B0kEW4zz20P9gWvLTb7R6Ob2fnpFzb2rlqWg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647b8ee8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":385,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (384)","md5":"b671422d29097c7d76891530fb27b9bd","sha1":"d752f1a8b02337bce628fd1b80b7c21665871ca2","sha256":"648a6a80b5a1013a983db2d23e885e890f6699abf8262d29419e3b00939eec7c","sha512":"42dcbc325a4424ac326ef15495ff6f933d3d45045d8e445361d775410a8873dfac377c7c46b7cca00955870b8290aa6ffaff894defe5f76aada838474f00a61d","ssdeep":"","tlshash":"59e068875095d3fe17f52ae2c00b82056616ad78d785990240fca1917af4192d15ea2b","first_seen":"2026-02-24T14:18:16.814734Z","last_seen":"2026-03-14T00:30:26.697069Z","times_seen":7,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-2d0da3af.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"6ac4b41bfa3079e73da08ba512cca2e3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 472432\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d2f964cea539cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14213,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14213), with no line terminators","md5":"6ac4b41bfa3079e73da08ba512cca2e3","sha1":"28236a6e21a500f8eb1fc0804ed1553f4b7fdcae","sha256":"b6ca684b4ef298f79d931ea40f8c3b597bd7e8d892a21e7cfc756cb3215792eb","sha512":"8fc4f8a4242748771f8a9220744ad1a1b501fa381ccbea978dc7062afee4c8788f2ad79a74572020146ce13610abcdba43f005cc36a2a455eb2d6a226a689f24","ssdeep":"384:UJw/U5YK8Hx9KJsThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJsThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"9052c6a7b2a4782d42379712308f3205f33b7d45b215da19f36edcea4aa84c16056f3e","first_seen":"2026-02-19T03:13:10.683375Z","last_seen":"2026-06-15T21:26:04.416628Z","times_seen":7904,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"eu-swarm-newm.m-galabet1050.com/","fqdn":"eu-swarm-newm.m-galabet1050.com","domain":"m-galabet1050.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:41.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1050.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Feb 2026 17:08:16 GMT","end":"Thu, 21 May 2026 17:08:15 GMT"},"fingerprint":{"sha1":"06:DC:3E:A8:3B:BD:CD:B7:2A:1C:2D:07:95:79:F5:A5:AC:64:B0:EB","sha256":"41:B9:30:EF:1C:1E:85:F2:ED:01:A0:7C:D4:4C:94:D8:B9:A2:F8:4F:B6:B8:83:22:45:55:33:FD:4F:D1:94:81"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eu-swarm-newm.m-galabet1050.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://m.m-galabet1052.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: H54RSgTrrVJLnecOlyzWyA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Tue, 24 Feb 2026 14:17:41 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PL2wklDVJy%2BFjbwwzKE%2FjxWJ8fRtpr5PJWLPsd2wvZ6bQNIhi7XRliCMyD9%2FKOHGP4Ml5XrVRCJMAQmKcypG1xxuTNtTbb7KtIrbmc8eukPLM1p3lHMJeIjGCjy%2B4Q0EJWRnjxX9KUXWLJzWgRmjkrsl\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d2f9682a9b26e70-ARN\r\nContent-Encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7650\u0026min_rtt=7564\u0026rtt_var=2184\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2352\u0026recv_bytes=1177\u0026delivery_rate=380002\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=d5fe410223f46775\u0026ts=32\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":20,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"eu-swarm-newm.m-galabet1050.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/content/images/casino/icon2/e51c58134d433109b31debed84cf2e13_casinoGameIcon2.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:43.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /content/images/casino/icon2/e51c58134d433109b31debed84cf2e13_casinoGameIcon2.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10774\r\nserver: cloudflare\r\nlast-modified: Fri, 24 May 2024 12:56:19 GMT\r\npriority: u=4,i=?0\r\netag: \"66508e73-2a16\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=_bbOE6q2Z3rGQzWHTJ9XTcjj.7mrjSn9pZ7KNFyBQ0U-1771942663.9785857-1.0.1.1-_BzGdt9CMvYnR2f9igsVdKHcwaS.aRV4v35Y9hDvDAUZ2SdF2a6sgEBBy3HhDWolcXq3XqrWPf0h5U_fW2bqCF6FExoe2999u5Se8HgNBcSEvTlCm6YRoYFrf2lai84z; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mhm27ttiQWE9z2ng%2Bw7W%2BdPLEHGJcqNGJt8yUv0%2BfyFwNv%2BSNgNjlKszi%2BtD6S5rdIfPBT8fOsAot4%2FvoQJ3XNn8J2sZmMb3aYniN9%2F9KJiYyCWfOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9691dac076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":10774,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x155, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fd64836294955525c3234a6ae669b8ed","sha1":"357896a2311f77bffe85a4ca12c8ebb0a4d7ac39","sha256":"aeb0a00ddd384094701939cc5ccbb616f0732f9cf20ee1d6426ef74d29fbca2a","sha512":"cc78264e68abded86677d7b5fc599ab6eeaec4e9d68f227ac179819bdb0bb4a233305af3267c8b295b64812858366dde252dfd2e3ebce24b203fc1266b61737d","ssdeep":"192:dsmGCDlZNOHMbHG8XPQ7h98BGcKWxg9xxCIvUaf2zHnQLXVC7tKb3f2cu5rQBukx:emGCD5JG8/QLOGwsnOzwT9v2cuaQG/","tlshash":"2122bf15c7e62470e5d8af337a9674f2aaebbcd20336600dcd70a1ab54e412e2244d9f","first_seen":"2026-02-24T14:18:16.96845Z","last_seen":"2026-03-14T00:30:26.79352Z","times_seen":7,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/lodash-Ddm1dqL-.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:29.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/lodash-Ddm1dqL-.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:29 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:55:56 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4TT26Dtl%2FSGaUnI%2BOYAzAGSi5MNUXlhfCPQSsqbg9Rmsptb8%2BsWtDCXosmV2PRfHCTHQJhrvsCKf1Dr1uqwJ3EAhLwMYmHXvZmexaDaS%2BWVkFAE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f963989298a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":215924,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31254)","md5":"1abd4f2fdf33be952794d5e7949c86cc","sha1":"17f59f1c970fbbb98551ae3282f1f3762ec0df25","sha256":"5db2726c3d8c8d1460a832d34da738d4681e678ab6cb811de316050a18cb2cfd","sha512":"aed7df1b43c52a1bfc09cea4614a5678ab9b625c9678a47f3433c139c882dd6ed01ca664967b5e3171f59a611bb6d9fa37124c1ba60f58bc09c3849e29c5b1af","ssdeep":"3072:pcOzANJ/Y/ysfRPlb9pEh7omhBgcGE3Iq57gLtm4cqxtEIcHaCJ:plyO/pfRPlb9elgsT8LtmmRCJ","tlshash":"ab2481c835d3f0a19366247400ff044bf23dae65a88cc444e296e1ec7db996d9277ead","first_seen":"2026-02-24T14:18:16.963859Z","last_seen":"2026-03-14T00:30:26.729529Z","times_seen":7,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/Home-29FquIl4.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/Home-29FquIl4.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-D2kxYVnt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942652027; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vU3lZRFLhzFzpG7UgY6LOAD9AV4uh260LEU2h0xjqaokCQSk7qk0lEYgLdC16H%2BLiGyGRpVDquyvLkrmohEfRN0PlkIbwvZSNZErwz29WCoobAE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647d94e8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":592,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (591)","md5":"c4da4894b5ffa5e8a7d9934b3d3859d1","sha1":"1e0d3b033c1c47b8e788cf1b8a8aa4fbf5855bb0","sha256":"0bc43ade495175e63835fef806c9cf79b003b62f9e08815851bf4f46d7ccc18e","sha512":"e12f56fa8bd4682b72b78effd7946c89a4eab825e9b73f7f433f6758eab22901355d90a5daf9bb7c1a71e838aeac5752d805bda8789455d7546d5a4a9284d306","ssdeep":"","tlshash":"f0f0475da191f87c529b1580f2187c6950692e54f7784140431f05ad477118d442fc0d","first_seen":"2026-02-24T14:18:16.773672Z","last_seen":"2026-03-14T00:30:26.788399Z","times_seen":7,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/withPanelButton-NT41boAQ.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/withPanelButton-NT41boAQ.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/NotificationsButton-o65atfPs.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nuC%2Flbrx769VWCfzoeSmkgRQXI9XPqVH77BXkk0QiZt5MP1h3spNDBPZXgm4G%2Fh2lGHQSYJBjG60pZOPjOk58L8G12KjTAOFLcLmz4N%2FDCvMclg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f964d986d8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1089,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1088)","md5":"7b3692a2bc654f127ee28ae67bcb86e3","sha1":"c816fce5fa99f4792f594ba2d04e3f79dffb58da","sha256":"e3dbd067b82a5c53e151c8ec4ed9a2f5dc0ef79c54c705558a1dc82a926a0844","sha512":"9a255fe6d47146854aefcb1f0fd3e98ad0f11f9201bf6014a823ea2669931174c34b2f2f7b562a44752f4d2e898748fc3e8999f7ff5bbdd1683383db8bc9b55a","ssdeep":"","tlshash":"1c11f0e5f580a9b1e0c81088577b2db6719a32c9dce1159021b6c8da5fe80489a1e9af","first_seen":"2026-02-24T14:18:16.857205Z","last_seen":"2026-03-14T00:30:26.668493Z","times_seen":7,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index-DnKUOqup.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/index-DnKUOqup.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-D2kxYVnt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sXmi8jVJZaZm6tMqgVP6zd%2Fac7zpuAKqbSRAWYEWex9Whf3oWD6JHC6NXO%2FCmY%2F5%2FUO88IS8cU%2FjmPNdh33M7R42DmN6kxal6bi%2BxbiAJWnAm5c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96522cfb8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2888,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2887)","md5":"a8c7f10d66426bad8889ee53519b2e9a","sha1":"dc309971b8ecbde75a2938cffd4d8ee1338f4e3b","sha256":"119a5d82f113f5dd9f51ab2e4a9a07c5dcc0a789a9d6b526639a390351363592","sha512":"9dceb7d6a10727ff4a25b5fc1986a02b0d82809df4eea9799238cdb0763c1cf57fbc8b6d3b6b77dddc9bf23de470ba8cc89ee1389613f12f95307f550d5118e6","ssdeep":"","tlshash":"d15143c7a082d7f8efe608e6415b10b474374e5cbd1b41d092be08874a98782e79bf4d","first_seen":"2026-02-24T14:18:16.970398Z","last_seen":"2026-03-14T00:30:26.809074Z","times_seen":7,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/Odometer.Dtmtuu8d.css","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/Odometer.Dtmtuu8d.css HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8vdxBXikTaOegX%2BkwOWtipSdtxX4GkBCH%2Bxsj23JhayKuikeQFLAkyBP5PpL9lh2ISRxfx6haEkkRb%2FpP9mpuHMc%2F3uTsDpV5S1VbXX%2BCxFBzHk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96524d3a8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2758,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2757)","md5":"e60bd0b6b84d162ff84ef731b11ed036","sha1":"09af532026627df2629f1a98a049ee8c50194631","sha256":"8d2a9d2617a60055e91c6b16f4cabd14851836edec7bf90fc8760e1d31a39df3","sha512":"a85638b5f89d49c50da5f9dc0cfaceec033c45f524a51bbf266fe9cf67f9ce63ef157745964b9ab7c1811f8e2f2d2c5d6348efebe6818d6fa5beb8291e36c725","ssdeep":"","tlshash":"2451e1154f910364633a7906b5c81b51bfece5415223c58e7329a447cf83db9e398e1b","first_seen":"2025-05-18T15:21:59.195484Z","last_seen":"2026-08-15T04:45:46.192519Z","times_seen":310,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:400,700,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css?family=Lato:400,700,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crm-lib.fasttrack-solutions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 24 Feb 2026 14:17:33 GMT\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2338,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ae317c913d9f17e384174fcac1e95f49","sha1":"97048ceeff296795e17fc282e38d26d44fce8bad","sha256":"0250efe84de4fea78b47bed1e3367687b72cbad25fa556879acfd9adf33f6b24","sha512":"3be7c2d8b49c8ecfd8fbe46e0e57aec92fe696894da6243f6b9f0052461f28eaff9b6974068276cde565287efe54a8a16379b21a522dfaaad925fa38215bfcc5","ssdeep":"","tlshash":"ee41ce92096fb908db830cc212c97d32ef0f625064499935afff14d8bca7d699362b0d","first_seen":"2025-09-17T17:57:20.126253Z","last_seen":"2026-08-15T18:18:30.847395Z","times_seen":7617,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":133,"dns":1,"connect":24,"send":0,"wait":35,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/NeedToLogin-CJzXWk_i.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/NeedToLogin-CJzXWk_i.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jnA2D6aECOrhGX1YoiSRDqmhCFKbnpSg%2BpIWOAXcputYWmLCL0zRjhdFSJJG%2Bab%2FtOOI5QkmUg3yVnDIX%2FPG6HdSIXAMnUjdWfhxG1a%2FTq6Md64%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96502f4a8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":409,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (408)","md5":"37c41e9cde1f88038c061a6893135848","sha1":"ec60322412dee43921a59f8a0037ac92616b6ae3","sha256":"352a4692e27722c09e14c91395695242715e7b030a8f7550c9e9462bed35a75b","sha512":"380cbb81bbad09fc48d7b6954b2904552cdbfdb6e78eae666d8fa57b119197257fd345c91ebdee3c5914142235c2be596cd06b01009a75727ea1ed17b18f446d","ssdeep":"","tlshash":"97e0a35ef4a5dafd566d0cd4eb55682230160da4f7768d98405c44444ab4081130f6dc","first_seen":"2026-02-24T14:18:16.973617Z","last_seen":"2026-03-14T00:30:26.812031Z","times_seen":7,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/api/public/v1/tur/partners/751/components/6713/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /api/public/v1/tur/partners/751/components/6713/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Key-Case: camel\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncache-control: no-cache\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1000\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response\r\naccess-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=HQ0AE6JA7vuhRfrvp0Zm4.K2D4lBEMDc0Z5gF37H_FE-1771942654.1786778-1.0.1.1-KHhmT9RfcOByGKqreHZBSEOIcksWgkso0DmJGP1YVZ75Qia4rqvL5bnmaq.zZtxi0WcFkwNaozHqA56Es1lmouAey8SnV3dB8bTXopWFLNgzOe2V5_jqn5Rc_T._KuAe; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QDOswynUbeSgJDGQlsfxhiutihbNXcPelGNqhX%2B3n0dgSKI2qZaZJ5iPpHYVZ6U%2FNNgrqIs7YovJ3u1YzD0MMUZ2KSJ379RNyo989FdGhriujJ0XKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96549c111a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2615,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"57bcadb4fc8dd230f6f3adc9cfa648b7","sha1":"321770a05730c5f865b429f3fcc694ffc9fa5ec5","sha256":"1772e571c74fcc1ca93188d5e69f84c965c726a181a7b3d561755c315ef595b4","sha512":"cb9b859208257963cc58c460d277aae9b69d53bb7bfccc6a50c8d87c4bcc9500776b35e7f5268869b4ade92c59c96b39bb491046cd4ea1fab24db640d2e02027","ssdeep":"","tlshash":"f1518b13702d9d6a5b507b40b8c7394ac8ee2447dc0a5670ec494f8d82fa63ac6d33e7","first_seen":"2026-02-24T14:18:16.975259Z","last_seen":"2026-04-23T13:40:26.06858Z","times_seen":42,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index-BCvg75Ns.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/index-BCvg75Ns.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:00 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HaDhQWHUpPMCB4UI0BTxkhSBHouxr3YhnyZoaFC5nM39yUFFRVt0PUeGLx74pQjLRF%2FmfUvFSlKTqG9G%2FNd1Ni1ETDNpCg4EGeg%2BbmYe2IwGhi8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96438be48a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18026,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (17805)","md5":"80684ac427b39b57c54532656918cad7","sha1":"b465ae91c660775fa362fc898ecfa7d48bdf1654","sha256":"e68739d973934f56849354660479710ec2a44e6f31cc44e06565a0d3ba9ac168","sha512":"50b2d184a947d9a71d8f5c654d514919f46dbe4dba4799665f37d37df781bb720a838e9e5120b66bcf5f23c0170f3818f159a5b4b1ca6782455a25a2d02b23a0","ssdeep":"384:aIMci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJ9:aIMci408FFnJrIjE3D/OY2E0xqpc1NKb","tlshash":"938209d0e2b4f7a642e86add80392074f2218c2c347dd0f1b6b6ede970664ca856dd37","first_seen":"2026-02-24T14:18:16.772008Z","last_seen":"2026-03-14T00:30:26.711454Z","times_seen":7,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/tr/0","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /tr/0 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=120, no-store, no-cache, must-revalidate\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ckj%2FcUE41AWN40LMxOw0iF7MQpuH5DERtoWaNp71BC7%2BPA38a2pRYwDFoEqFgNyUosJa4%2FU4Ypd49eq1hruWKIXn6qhs0%2FLIZtQx48D3%2Fv%2FWe48%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f964f6d1c8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8381,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"aac85b453c27b377226c92e069d294f1","sha1":"499647d5f3a8088169e642e41b13e76b6cdb1d85","sha256":"9b5511be06a06b5760755bd374379315f090103c1f5e355000a770cf09c20ff6","sha512":"4a0dce71383e5b720ffba2b1760013457d74daebf464734feb3cda41b5b55ee407c4b578f2e7054f6d97ab47481454139327cbba16d028d0f9f3dcbc59f3dd98","ssdeep":"192:IBPHfygJtdKkZnT39yJyRiBImgKsxZKNI69Jj+gtM:IBJ1mI9kK6Xj+kM","tlshash":"b902848aa5b1a8350233612967dbf40c6f616017d505ec543a4d96ec0fc9ba881f3fae","first_seen":"2026-02-24T14:18:16.863492Z","last_seen":"2026-03-14T00:30:26.680711Z","times_seen":7,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/LiveChatAdviser-u-RpAaJi.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/LiveChatAdviser-u-RpAaJi.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-D2kxYVnt.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942652027; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ug%2F4z5HwjAIH4Ck8ayrTXX%2FPsn0DaIZGL6a6CZLfrYJzLyz3W1V7RyE%2BkxirUWN6z%2BLpmI%2FOv5X5bXa5EbRqzirktdOZ3No2HKMQbW8isX%2BgJiE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647d9438a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (861)","md5":"f2beddf65e1a86655ac4778cae74d183","sha1":"358304aca6309a758f5f410865a6f3cec2ea40e7","sha256":"0acc27d5a07e3c22bde012cf7d28e683ccff5a3ef76aeec4a8f4ed3cfd248027","sha512":"62c7484c2b340ead12a990702cf311ea533f2f2fb2ac023721419aacd3fe1e6ef22b3eafb7f21520b0cae41a4487d3972071342ac1f3bf09266547fb68344d0b","ssdeep":"","tlshash":"9c11e3e5f086b7fd567a188ac76a2443300a4ea4e17d0d76507e19505e6ce06d249ed4","first_seen":"2026-02-24T14:18:16.947873Z","last_seen":"2026-03-14T00:30:26.73776Z","times_seen":7,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/BetConstruct-Icons.C7cyRZtv.ttf?doerby","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/BetConstruct-Icons.C7cyRZtv.ttf?doerby HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index.Cj5ks_WG.css\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942652027; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: font/ttf\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gXnuU8Cv9P3MwW%2BO0dmBWG1f3Hmh2nkpSSoAk8hxVe8E%2FPWIejA67dMzjrYC%2FYlSU2S%2FcGtSKEn2TVOKPfs7iZfzTzHHsLogZJcG3bZVTpzKegM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647e9818a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":734908,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, BetConstruct-Icons","md5":"9f14d20cadac2418a9293b72c5bce4ef","sha1":"4064bf0dd20cbe09f65c8ca26973a7f2cbfcf617","sha256":"68babb8ce22cb10bb011200a3d46897d4f77d50e24ae807f281ebd9251722dd0","sha512":"65ee359167e83cda9c241edd9d8945513af9305a976e80a1b5faccba6c023c2277ec820d563b24407e408be0844a6035a5b6ff368670a0ac63f86e89f3191ea3","ssdeep":"12288:tYK1z1syN47ppeOJ0V+v51OpdAJXzlvaeisVKN7evJQVF50welXCuzeHVxj9ymPo:tMyN42S4YtdOEoF52XCpHVxj9ymPcoDM","tlshash":"67f42a0b630edfce909265d30c56a01b4dd6e1094f3f9722ba8e9d18d1156f48d3abaf","first_seen":"2025-07-05T05:58:55.96483Z","last_seen":"2026-03-14T00:30:26.74895Z","times_seen":22,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/NeedToLogin-CJzXWk_i.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/NeedToLogin-CJzXWk_i.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/FavoriteGamesContent-C_c3l_eg.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OtyA2WMhhdKmf2No78ZB%2BdYQhsjqqffdPyBuEs70iq45NrqUSMVr739SgUqIKb3%2BPPKnXHWqaf9%2FXSvZiSWIlytZm3kP%2FFKpjmk0ETJpRmLV2sk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9653c9468a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":409,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (408)","md5":"37c41e9cde1f88038c061a6893135848","sha1":"ec60322412dee43921a59f8a0037ac92616b6ae3","sha256":"352a4692e27722c09e14c91395695242715e7b030a8f7550c9e9462bed35a75b","sha512":"380cbb81bbad09fc48d7b6954b2904552cdbfdb6e78eae666d8fa57b119197257fd345c91ebdee3c5914142235c2be596cd06b01009a75727ea1ed17b18f446d","ssdeep":"","tlshash":"97e0a35ef4a5dafd566d0cd4eb55682230160da4f7768d98405c44444ab4081130f6dc","first_seen":"2026-02-24T14:18:16.973617Z","last_seen":"2026-03-14T00:30:26.812031Z","times_seen":7,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/content_751_c372c2b09b76d984de01cd2413db3fa9.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/content_751_c372c2b09b76d984de01cd2413db3fa9.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25320\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Dec 2025 14:02:58 GMT\r\npriority: u=4,i=?0\r\netag: \"69401512-62e8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=Ns4916zmg4qdLdUzwjnXN8ocKLFAN73PBl80162C_vs-1771942654.4038987-1.0.1.1-VwwJYII9vaqjHSnQTAYmHTsVlomYT3y2.prvzCHQSkkTh4XtWGhW8Ecr5J94qAIoZOHTuEvdLy0EFndX9TOdAhGm1s_HmoPAnQ6lKFPH60j3Cwaq5IVbBmcmAXKsxC6j; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BepNYjCNYKu4UR%2FyOSvcdT4vvt9FqsbEBvU%2FtDJ8hyQmupOQ1lTIfhozgB%2FFg7%2BtQ7QeVJ3JNuo8i7taFvzNqmAcsoveMBH5JYiMrCaDEla5i7Dgqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f96560a8776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25320,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"acc869e91de526af3cc37efa5e7cd714","sha1":"96a65c3c5c64e544be0a75f42e7578147811db69","sha256":"57b2bd8ba04c5fc5617770502b74fbcbe449dbb22377f04e8042147dcc5da51b","sha512":"d35b2e9c750078007a66162e0b7956edb0b85f33f4e5fdaa25c83b7a4bbbb8e7540ff6eaa60d012ba904f0254bf0d35ac531b422eaa44763a785f64f01442722","ssdeep":"384:2AJyeaoQmlt01QNg7DPEqZK5Ud6nw4Gw+Ma8iASXoK41z+I/gYbz0n89B/EV:ZyeaoQmlS1BL6uwLHSYK41+Hc0nce","tlshash":"82b2f1b0154ab6d3708548666c0d3e9017ce8f5034ae0bf4789020229765f5fe4cfb9a","first_seen":"2025-12-24T22:39:16.063814Z","last_seen":"2026-07-06T22:32:46.641113Z","times_seen":64,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index-DnKUOqup.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/index-DnKUOqup.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EHXfAy%2BaHNCYN8FLcMAjFnwGRdv2OnrFIPcyjGO0rpdl6GQFKQ7fCoj0xelw18mpM4n52UB2gp8S%2FbNRYYbrQmFtkISwrnE2blp7VLffMBB9Bpc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96502f448a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2888,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2887)","md5":"a8c7f10d66426bad8889ee53519b2e9a","sha1":"dc309971b8ecbde75a2938cffd4d8ee1338f4e3b","sha256":"119a5d82f113f5dd9f51ab2e4a9a07c5dcc0a789a9d6b526639a390351363592","sha512":"9dceb7d6a10727ff4a25b5fc1986a02b0d82809df4eea9799238cdb0763c1cf57fbc8b6d3b6b77dddc9bf23de470ba8cc89ee1389613f12f95307f550d5118e6","ssdeep":"","tlshash":"d15143c7a082d7f8efe608e6415b10b474374e5cbd1b41d092be08874a98782e79bf4d","first_seen":"2026-02-24T14:18:16.970398Z","last_seen":"2026-03-14T00:30:26.809074Z","times_seen":7,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/CompetitionDetailsGame-BpCnBwyV.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/CompetitionDetailsGame-BpCnBwyV.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/FavoriteGamesContent-C_c3l_eg.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UPD3UZb4rVviO33Pu%2FNokslq4eLUwyWLVhoqpB%2BBZ3b6Sd02Gc0hCbV5QNivcFVRUo9DNTF3C2LIh0GiPD%2FClE%2BdaLs%2FI8iW%2B1D7evUk6YKXDtM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9653c94b8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":428,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (427)","md5":"8ecf6eba82b1d427c9369097a2788c23","sha1":"3f5edba702e981ada186fa1427b9e90e1a4ffcfd","sha256":"f421aaeca2ef184f55db524d3dccb433ba4658b26438fee665ac68a322ca3965","sha512":"cc24ea01fa7204baf75717c516a89efd9aa46daae5ba1e3336188cccc48335e449577dbd84bbe4f1d9c66d4deeab1255178fb380bf20b413e693b8929f77f506","ssdeep":"","tlshash":"57e02b964410af7863bfc1dfb2d052859670808c4b43cbe9b16c9b9c43c609d23057a2","first_seen":"2026-02-24T14:18:16.980886Z","last_seen":"2026-03-14T00:30:26.657503Z","times_seen":7,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/walletConnect-CiycSUBb.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/walletConnect-CiycSUBb.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/WagmiConf-DQswithC.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942651604; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:00 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F26qMnkjMnLN6ZOC7ZqPavn7rWchwJpK0jEA0ms32wRpenHvhStMzUts10c9h2t%2BdlN2drW6qIjorZZcfi%2BxKsp37HfhQTQgYfdFtGj%2BT%2BOp0yY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9644e8068a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1997)","md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-06-06T21:30:11.623634Z","times_seen":1659,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/BetslipButton-BLwQXbO9.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/BetslipButton-BLwQXbO9.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nO2joUywq8cMB3Qw5uaGELnjt4KYp4aTp1fxwe0uA45U%2FDvZxyJG%2FZQzxA8baiCK9SlWpWNr6tUoLuc69b6KsHDNHqshDbItO5eyhSQf0hukV18%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647b9008a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":418,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (417)","md5":"94c0b9a41e53bfc380ed72c582bb8567","sha1":"364f683d5be662a083e4be546c45de4d7e7a148b","sha256":"3e478388e180c74ecb10e29cac8c8dd11606a18d0e9d980dd191fa058b8284ab","sha512":"d04c0ac4b418f6417837859396c4519262907a0b0fa23b0930d8a53b1273a07f1eab278f1c72b9c3d8a76c92be9006f3d79b7607a9629d376f60284e4802602a","ssdeep":"","tlshash":"68e0f1464948c2fe0b661dd621028202342296bcb345e68180fa6c527eb4556c82fe2f","first_seen":"2026-02-24T14:18:16.816242Z","last_seen":"2026-03-14T00:30:26.679546Z","times_seen":7,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/FavoriteGamesContent.DS16SnKe.css","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/FavoriteGamesContent.DS16SnKe.css HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/tr/\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:04 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rpDJk1sVkP5KfJ8G7Dem%2FED08HQ1v%2FT4xVHx8w7yRXcYZV3zy5E3TisFhyCyx%2FdhpZxJqltocvKCKP0QbibYToeOekuSDeo2qFSVXI365Cppzpk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96502f428a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1467,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1466)","md5":"d6a6b777d85d2a03754ce7649f5b61aa","sha1":"4eb808a9596fec0763090534a0888624d65c4c5d","sha256":"8f29a3161b0410b5c14679dd707ef82830176189673c94ef9aa92f9c78cdb3f8","sha512":"5c7df8fbed292b8b4c0899c01cd7df782af076cd499cb0e88280ee94c4617332468ca66724e5ddd03f226850ef9e2fd7cf0469769f27236b86ac49f2d1e8a5c9","ssdeep":"","tlshash":"4331dd54e261d137387f77bfc78c4edc7c24c2d678222768b5c1691189c2ae92e12e69","first_seen":"2025-04-23T10:22:48.836538Z","last_seen":"2026-08-04T13:11:59.961781Z","times_seen":1216,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/api/public/v1/tur/partners/751/components/4273/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"OPTIONS /api/public/v1/tur/partners/751/components/4273/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-key-case\r\nReferer: https://m.m-galabet1052.com/\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1000\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response\r\naccess-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=QioLixsaf2KJKio7s3Zo9H17vz3L66u8s3AOilmwIa4-1771942653.964739-1.0.1.1-mDcigD5mjHy_c_XKGj_ueatrfT3bLdtRpMq4_YDZ6N5mxcFbgung0wHyfhoq_tje._chf3rr9Y0AUM6jTFoZww6wL7t9Ddtv.Q4nIOOk0ylftMCO5XkkOERQ8mWGBceD; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2BNVFqMpb%2FazwRc5o8kqlO6O56Gp3bD7AIXIKt4E4cgQSV%2F6sEKyO%2BAO8tHln7fyPJ2hTxlrH72LzzIwrAy2tX4UNbJyv2%2FCrEp%2FrNJPaxIsLOLNNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9653496a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geoapi.qaxcraveniq.com/?type=json","fqdn":"geoapi.qaxcraveniq.com","domain":"qaxcraveniq.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:30.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qaxcraveniq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 05:55:55 GMT","end":"Fri, 01 May 2026 06:55:21 GMT"},"fingerprint":{"sha1":"C7:A0:C5:A7:B3:85:DE:F8:78:25:39:EB:B3:24:35:72:3A:1F:11:97","sha256":"1F:DD:0F:AE:0C:AB:24:7C:36:D3:0D:64:8D:D8:A3:8D:DB:B4:74:2B:1B:FF:3B:C7:B7:10:BF:C9:0B:9A:92:59"}}},"request":{"raw":"GET /?type=json HTTP/1.1\r\nHost: geoapi.qaxcraveniq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q6t849oKw2quzb9qkTMOe4s3SpWs7aLOlwKqHVLe9AIY%2BB%2F92Ow1cf1VVkdEU%2FbJevuOsOtnKkEsWE8G3B1%2FQoIeTTHnI%2Bkr1MxXYp7CkiWOmxyUOh0%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=ShDZEhvHtywlyLwYY84XHiyXmx6vfSSaqpSfy8T2jts-1771942651.0007663-1.0.1.1-1hVhG3aJXGOr1K9mvYETNMJgUpwr._QSq.jGzWIKFN7cT6AEYPthMsM_qN6lYUbckKUS_Yzcuj.v9ZAOwCgZdZrzn3zZ41pYYqKA0Zb6NG96SP3eZJJ5vslYWnuga79v; HttpOnly; Secure; Path=/; Domain=qaxcraveniq.com; Expires=Tue, 24 Feb 2026 14:47:31 GMT\r\ncontent-encoding: br\r\ncf-ray: 9d2f9640b8485a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"ae0c7b15f7b07d5287f4f56fc107254a","sha1":"dec4cfb67f23a362cf007e3414411a871f42f8b4","sha256":"e64d2e0a65cac499cbd1024efbfdd31a982c7a1d825de1b2bdcd6e4001e7854b","sha512":"74b1f188e6f60f077ee12e4556f5d70f415e2e0f89f8c513a50df271545efc9d30f25d65a4ff4acd1cf25c60d0a70fd5664bfd72608ac1b75237a02981991b8b","ssdeep":"","tlshash":"c0d02218184d8d8aae34c2882a4fa9331ab220ccc28f40c4828aae31c3d86ec3288840","first_seen":"2023-05-08T13:32:10Z","last_seen":"2026-06-06T07:02:31.879116Z","times_seen":186,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":77,"dns":58,"connect":1,"send":0,"wait":83,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index.es-CSWu3UeV.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/index.es-CSWu3UeV.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A5pTJQsrwBOQx%2Bty8gLiAHZJFkEFNQQSK1d3exZas%2B%2FGav5R4y0zopQpb4%2BRzvHTrdVr%2FdotMv%2F689i42BZwEEuF16qevJhVXIN1SeP723FMcck%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f964579968a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":294785,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49925)","md5":"b7da81e609f3dc33037e6b059f273873","sha1":"fe973bdf78b2c85b6a415add6b2c2cc220017bc2","sha256":"e667dfa1b572dae551aca51c4e630d9a2a8616ea7b3e56fabb733e2cfbc36324","sha512":"99367a98b8230fdb0fac493b54934a5bb781d2f413b5f85e52d530e939e77056a6897edd2912700c156b906e3a76afa526ee0e792ee0428539790d90f253c988","ssdeep":"3072:3Yb97d3bblKS+D67LBmBS6tSx6XSKPO6DProVcSrpHsMfp0DlirNY6Uco:3Yh7VbliD67kw6McXScfrMx/rNY6Uco","tlshash":"5e54f98472a7f47543d665a8943b1642f23a5c64700c902cf6acfcdebdac4499a3bf78","first_seen":"2026-02-24T14:18:16.90864Z","last_seen":"2026-03-14T00:30:26.681681Z","times_seen":7,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/flags.BQeYwOcj.png?v=609","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/flags.BQeYwOcj.png?v=609 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index.Cj5ks_WG.css\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942651806; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 419079\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8JRnxGnE5eIagwHWtMKnOKZ%2B8%2BXJUR2juMMPDbl2jzBWToCWNrXjZyyCZRjzflcDr7gk9pz3ylK%2FzQpyI66CbpjO7jnelEFxRoH9K%2F9OURFYrco%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9646bda28a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419079,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 17960, 8-bit/color RGBA, non-interlaced","md5":"4847b140eba56a8858ff655ea63615a4","sha1":"78c722b026affa42f14363db80b384a788c21e1f","sha256":"1d9ff867ae65d7439d1e0fe3132c884175bc82ee12e5e02083f75fda3c54f59b","sha512":"38a3938fee78c7ab60089ced75d64251dc49896b06174bc265876bdcc92068bb753d5968c94b2d5f172b08f05a2cb2e22351bea4ac9c311290286c0edd67f89a","ssdeep":"12288:I4M5/ggZ2vqr8nIIFnk5LixttDWO47tfG4:RgZ2lI4nQ6T6O4o4","tlshash":"9d942310fc6d7b21238361be38171edb44d6b927efe725e1a27ed4c4e76e8195c02a12","first_seen":"2023-05-08T15:58:07Z","last_seen":"2026-08-15T11:25:22.0364Z","times_seen":2080,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2176\r\npriority: u=4,i=?0\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: image/webp\r\nx-robots-tag: noindex\r\ncf-ray: 9d2f96517831c0a2-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3552\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfepCHWB1qkSi-cNd1o8wsvD9BfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=35+4 c=0+3 v=2025.8.5 l=2176 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b91b6e5024dfdf6e8a4d61f0f74dd13","sha1":"1614f764ed7b516c7768fae0966abab152ac7d1b","sha256":"00e34844a07301274fc65fdbb65891aa95436b94c4c860d9edfcb96331c5487f","sha512":"c3948fdb40f0f4154fce632acb88cf9cf57ce39d2858e4934d8820c4d5729da238c569448b5bcb6d1780e37f005cb9f5ed60093005cfa451a92270c4c0034566","ssdeep":"","tlshash":"48413ab2c3378c72ce2cb5e3e9b2d5168b449a5a91859afc22413d33a4b145cc4b89e4","first_seen":"2025-01-28T05:59:32.007883Z","last_seen":"2026-08-16T05:07:46.826074Z","times_seen":3389,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/payment_17384_751_5998fd87cbbc244ad73825bcc72d1205.png","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/payment_17384_751_5998fd87cbbc244ad73825bcc72d1205.png HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 28372\r\nserver: cloudflare\r\nlast-modified: Fri, 14 Mar 2025 06:17:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67d3c9fd-6ed4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=z9rFWbg9JtKdrHxKIUlCy4pDcKzc6An8J684UewKUio-1771942652.284264-1.0.1.1-7bv3KKp0WRqScnayOicwy6wMbvn8o_loj5Dwehu_FMQQgyoXxK0_vYi2I5_kB9ZwPDFY8BRE.VukbiLsp1lHJbTjgp_IVZ3z6Zqq4_XTUWwhQZZROw.lxa_KzZXYwSvU; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2BQ7uG3dzdYIGA8KtwOIbUT2L0zB01gkiA0MPTQ8amci915K236X71%2FbwqcbdwaeeoAAHoGQOs3jBn3uGunssBlRDCiOveJKE5vlGlKYADujpnRUGg%3D%3D\"}]}\r\ncf-ray: 9d2f9648c9a60daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28372,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 84, 8-bit/color RGBA, non-interlaced","md5":"8dbe6303ace1f430d46ea800c9f90400","sha1":"dd939ef8d73737ee1f65fca4975e672f8d144337","sha256":"39b1a8a27f1511b7d7ecac967e4e2e0c29fb71c11ca3dac8fccb2fd97276276f","sha512":"657f6c0c8e5c4ac1001a28555358620d0c3f441848a786bc842709aaefc967cd083dcea94b06c235b322541a440051dcd19c4bd51215b37a697fa3a2a4541979","ssdeep":"768:92R4YDgFkWiyiorsSo5+rg+1gpnywe80fBcBxz:9y4Yr57YsX56OxHexBaxz","tlshash":"30d2e0c4cb7869c8f1b744fa540e44390aa53b2d8e436f186e16f2ef15e64be51382f9","first_seen":"2026-02-24T14:18:16.985446Z","last_seen":"2026-03-14T00:30:26.821539Z","times_seen":8,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/WagmiConf-DQswithC.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/WagmiConf-DQswithC.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:00 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rLffOXDmI13IECdw69s6qyrBRWa94c2qVmaIf1q4pLm0Y%2FM0Itd%2FY0tgNUMXpqtAwkAdyNK0R4eIlgvSvcH%2B9vqu7yFGL6wTk3GyhrO%2B6RuHH3I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96438be08a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100711,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52270)","md5":"44d86b1af3aa92c31b954cc119808efd","sha1":"23adc1fdd6bce9f8c0481c71eb21a3e41288fd41","sha256":"f9c20a6e90ec8dc1dbef103ed21fc6b0d537192712e7bf26872ac4763b094a16","sha512":"aeec27c539b5c81611259a359a29a8706e2825957ba52f4a9d4329425b0c17bd064d6f94afbff6a4caaffb58d06504a0fe97d6be855fa485b630c62a172c6100","ssdeep":"1536:r8AqCpPuCdwD7ZajZlO1jMw3AIxkQXo7k8UhVnScp7XTF3waG00GYBl+LtqMEE8v:HqCo/xVXo7NU3q+LrEEnG1sRXon","tlshash":"3aa34ad07196b46103a74ae008bf440bf139ac34200e565cf26decde79b96aa9277f7d","first_seen":"2026-02-24T14:18:16.768194Z","last_seen":"2026-03-14T00:30:26.673113Z","times_seen":7,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/CasinoGameDetailsTournaments-BFFya2ab.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/CasinoGameDetailsTournaments-BFFya2ab.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AK31DNNZ%2FMV%2BeQ%2F3x3A261xZ0c72ykLGqG8LPitsJOD6qXDwMp4YX6cywiUguHe%2F9nRz32podtKfEEU1u%2ByDb0ISonMX9q3w2%2BNP8geGI0XLB8s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96526dc08a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147492,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"89649d72be704cf3249ca9222edbb990","sha1":"b83a45046119af2c5d85d147d5573ebde8918517","sha256":"aa262fe9430c29d8644af2be09cb8a39bd9b8e7ce57992d62bd03a2c76f1e8a6","sha512":"2a80d52e848edce20c35a7fc2b1cd2fe9dc825f0490aa5209cca1170fc28ed545a8d5fc9ccd9f10a3ef9316fdf132fb6179b1fe865c78b567fe0f36c3e6d18cf","ssdeep":"1536:0QaAbO3Q29cT86MoxxUQMTAIIvSUrrkYUi+4083jIrT3yYUiQ86M8kU4mp2H3Q2+:0Jy+vJCN","tlshash":"63e319d973a892f66d8ad7f890021849787d31bf3e36d1c4c1ed4dbedd1888c5829d92","first_seen":"2026-02-24T14:18:16.920348Z","last_seen":"2026-03-14T00:30:26.789064Z","times_seen":7,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/api/public/v1/tur/partners/751/seo/page?platform=1\u0026country=NO","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"OPTIONS /api/public/v1/tur/partners/751/seo/page?platform=1\u0026country=NO HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-key-case\r\nReferer: https://m.m-galabet1052.com/\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1000\r\naccess-control-allow-headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding, Content-Key-Case, Access-Token, Accept-Response\r\naccess-control-allow-methods: POST, GET, PUT, PATCH, DELETE, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=M0R6ZyiYQaD0v9tPSzD8pJFSQYZCxs1wa8Ja4anDJvo-1771942652.096499-1.0.1.1-ANApuU15RIQ0KSoFmhAhUF2lmjC6QDmFQpS5wihBDMmoICY3h.VUsu0hC.j94Y1naseK9NmqwiMeu2tkPeZjxRSHf2egPP9UXOhhButN7duxAjVr0L2SEOKV10st4NRA; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SwvzV1Gyp0wsOFxMMqHdzbRNtcc9isQcFmF8jK2fit9nKHkr2g9OCLv0RT%2BYT7GU7Z2AHI0WdupHjdcGIU8HWmFpZoU%2FwhoP5vPW%2FD06zNjnF3t0%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f96479b400daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":25,"dns":35,"connect":3,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/feature-game-bg.DylVRaHb.png?v=506","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/feature-game-bg.DylVRaHb.png?v=506 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index.Cj5ks_WG.css\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 65635\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=82icp0Xlltc5TJcI%2BDl7E1aQLJjEZ2vu0yh7i3bttulw%2F93oaX%2BC6g63v9BErtW%2BiC1QTLxAp1QP4leJmh3XDBTQTrAI0hPc6%2B6mIGrH7U2tptI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9652ff418a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65635,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 365 x 188, 8-bit/color RGBA, non-interlaced","md5":"9cf8b1322f0812d47b6f4786f70444d9","sha1":"f288161265b7d5ba09d62850d51fb02812ea4bca","sha256":"cd1ca11809d690a636c42534628b7c500fec1cc4a565a18732bf64cf7aadeee1","sha512":"4df022bd651dbf34a95bc65ac1f00df49f1a785cf1c1a7b4fbe2ff42ecadc29ddb2378aa4d1096533692bbc5b78785506d1dc101fc299eaf8abbc5fbe895a230","ssdeep":"1536:jhDh7pJ8F81ZBhqHo/nad6X1F34OmdQBhbW++iE5BcUaAL:tDhkF813hqHanO63IFdQsBcjAL","tlshash":"e65312ccc9e1adf3a2a87464b9c54f9d3502d3954c94ad306d391449fc8a83f62ee493","first_seen":"2023-05-08T15:58:08Z","last_seen":"2026-08-04T13:12:00.028071Z","times_seen":1415,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/storage/medias/galabet10/payment_751_1567874206cdddb754a14ba618a436b7.png","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /storage/medias/galabet10/payment_751_1567874206cdddb754a14ba618a436b7.png HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 27515\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Mar 2025 07:10:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67ca9be0-6b7b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=MW_q7nKc20zujjAfQqwTW3qq9seFlBrx_1eLI88_nKs-1771942652.3192208-1.0.1.1-onig2jqZSOpHzWRAJp8GHccVOBIvm4icjsOIDnVIacilCP5NrOGNrRWj9jFI01ORYRoI_MTpVhtQDaiA2KecQSu1sz_bkDaBnz_d.Olnf3k5bVz2MTFTix_1YJLRYZyv; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TSvqdb%2FN6Xt1DaRmw%2Fom6rqU7fj9s4uhK3ccW4IAiLEVzmKKZdo4MLaUM%2FobS%2BdcyQwdc9P%2BI7nYirq7catxgza999t57jNrVk9HxsDxwbIx3QeKAQ%3D%3D\"}]}\r\ncf-ray: 9d2f9648fb070daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":27515,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 84, 8-bit/color RGBA, non-interlaced","md5":"560be9f6185027e852caba34d7c3b572","sha1":"baebb46b4ca41fe8b5fbf37649ab0355ebb894fb","sha256":"363d7ade17d3433219aab1abffacfa2c145028b7c7db6ac993a7adaf8e4523ef","sha512":"247245a4f1f1c836773af16efcc797903fc26d45f11a102ab45e72dc80a0e5a573a7139d8d95305405762078058c7c52d811d340f51632075848311ca5156252","ssdeep":"768:M6Mj4tRp3QXUCK0kGT/4joZM/JVPD4+Z3P02qDv/BivGNJy:MBQJorUj3/LkS3ZqDvYG+","tlshash":"d6c2e18c1d66893040c682b329ffa4ed8460b6a96e41bddddb91f730dc1b8446fa2879","first_seen":"2026-02-24T14:18:16.989628Z","last_seen":"2026-03-14T00:30:26.749935Z","times_seen":8,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/wc/rewards-main.umd.cjs?v=492206","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"172.67.73.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /wc/rewards-main.umd.cjs?v=492206 HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://m.m-galabet1052.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Feb 2026 07:42:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: IozzF04B2G9OZI6CN1tvKkTzOeVdPorI\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=90WYI7AR3ezfO6fW4dNCPBRzcB3Fy5zSk6Dl01AN8POFfaInFxf2wOk9yCPQ3RFn1rA5YukGebZ1vWY0EKpt5kIxIRKOj2kITP5XBC3Oo3Zqtc0%2Fga45zQx8B9IVCw%3D%3D\"}]}\r\nserver: cloudflare\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 419f3eb3d74bedebbef6fc91b3f54a36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: bOa2WUcpKRqYEfnvBTTSBeAkk9BtH8L8kmrDIMGcRiczU6l-WwEn3Q==\r\nage: 1004\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"609f8e6887e1889e72c4e96fbc3e3d39\"\r\ncontent-encoding: br\r\ncf-ray: 9d2f964b6986c8cb-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":953208,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35732)","md5":"609f8e6887e1889e72c4e96fbc3e3d39","sha1":"1a137f4ece5f1fcbdd412cbfe382d4d3af7b5fde","sha256":"c1fad91dd5a74216ffa996be3df2737e4d30239784d7e34b004b713b7a569dd3","sha512":"c991d488a6d36de33254d5ea509320fdebb96f9bbdbac34bfc624dda5d1cf3fa3665b1ec7f02b5d51affe3e534e03d4c75a70c9a3181effc79c4a88ffc4b35f5","ssdeep":"24576:5iHlTFInH0lTghey0pZOrBQL89IQn9AZNnHF9G+lTlsREuIA:MlJInH0lchey0bOrBQLAIQn90nHF9G+m","tlshash":"50157d9072567434c3b795b160be050db23c5b027806c698f2bc99ea1fd789662bbf7c","first_seen":"2026-02-24T14:18:16.990938Z","last_seen":"2026-03-02T21:59:07.354611Z","times_seen":10,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":60,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/content/images/casino/icon2/2288d7f4b451461ebb5696c4c221d142_casinoGameIcon2.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:40.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /content/images/casino/icon2/2288d7f4b451461ebb5696c4c221d142_casinoGameIcon2.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T05:38:06.647578Z","times_seen":17913815,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/content/images/casino/icon2/2b1f880477cf4eaa76e20ab265c6c651_casinoGameIcon2.gif","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:40.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /content/images/casino/icon2/2b1f880477cf4eaa76e20ab265c6c651_casinoGameIcon2.gif HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:40 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1013610\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Feb 2026 11:29:37 GMT\r\npriority: u=4,i=?0\r\netag: \"698db9a1-f776a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=i4vtgxog8dh01iWpkEJOa50EZwXXWDnacuCHzlkcieQ-1771942660.6623614-1.0.1.1-ki6fpLHPtzn0ZUMwCay_JfzzvSOtqKMNEmJm17NeHq9P9iRFWtK.fPGI66Dvoqh1hWQfx7oGyBQ.jN_65jVPllartlY3TanZ6quEpzrkG79cM.IEJI7YQzUXH4mKiy7P; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GTqkmy9SPFnyWh1eYFXEj3T5KHdIvkV955Ce9drWSm8L8s5oECYVaovg8bh1qhI7pwF4oFcDkq0B2CM3pClKnIvnVbBktxtURWjBSaASYTXBSCFOzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f967d28cd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1013610,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 440 x 310","md5":"2856ca5c133073afc988331512b847ce","sha1":"f5aabb45522e879fe61439a4cafb3cca8787831d","sha256":"20f8a6748f229f3a45ee2b1aa06310887d0e5d3ab1f028485a3af82cc1fc2d8d","sha512":"a07abc206319088de7b4a6e45b6638a526e9ee38d8292fc1b6546e43e335f027db15e4aa928ebf9d5eb9fbd8c6e3767b1624ea1df6898149038db9b51f3accb8","ssdeep":"24576:rJIgzUhrVhHkFLWhq1terrVi4unN2zrDY:1Igzszk0iertI","tlshash":"ef25334984417a8cffc7391a8c89dc40bf85e61d16a64d7bf08136f65afb81dca9da0c","first_seen":"2026-02-24T14:18:16.992172Z","last_seen":"2026-07-06T22:32:46.81588Z","times_seen":12,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":254,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index-CJ9HkosN.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/index-CJ9HkosN.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:00 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=erTVSNVMhaBOFwkfpfBEu50de9TDpZjf9jDkjJz6DJ2j3LKkJLeNFtywOXwDAxDdjIVn1eAQDOgpLevD9szCW3gjrN7ZbO0Xnwgn6TSsr3R9yl4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96438be78a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221127,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37506)","md5":"b224cc25c350a7d3c8fa0937d6d0d93c","sha1":"55ca754d93ca4a04879d5e3ff8ba2902a0c33c54","sha256":"ec75cb08b7d2ab4c8b3ba53cad812af91e70fbbe95ba3c4cb7afc0bad60d565d","sha512":"3e6a818d2d309344518c2a9bfcd1fd2e4432d21e7aef9e93fa0de3aeffcfc30a190d0b8007466553d5bafc655b9737b7bb9de9bd13dc6c20b4c7a8c7e3ce3b66","ssdeep":"6144:efEL9y0h4R78o8e4YmIALoh6wj9Sd51jjVvFaTIRcDGRD6OL:ecJy0h4R78o8e4Yf/j9e5xaTIFROI","tlshash":"86240ac4b274b0b556e59494502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","first_seen":"2026-02-24T14:18:16.805349Z","last_seen":"2026-03-14T00:30:26.730681Z","times_seen":7,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/index--0Vsjbsn.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:31.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/index--0Vsjbsn.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index-BCvg75Ns.js\r\nCookie: b1749=0; PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=1771942651704; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:31 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Os3ndSzW09ajYmsLHF9dCfp6JT0Lxz6HMBCbrup5XNzgUEg8W5sfYiveeaZ7WkbyrLK%2BXgKKUw1Rm7tqXWAj7raJDSkVoda%2BodT17LlExgPJoQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96459a648a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157556,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2d719c5710bacabd4becb9281151d049","sha1":"a5612982969e2192acb6c509a7e0b5f13af6e49b","sha256":"b3741f6a09d34f2f24f437a1867183694a037db7bf4c41b8746857d458a5e679","sha512":"e5e3b0915ddc7843dbb0558378b74be2b8ac5f68b58b2b23320b515288dcaeac8eb4313b4b638acc4121a6ee04d5bd30c69fd8512bacd8ba48c7482f9602c1ac","ssdeep":"3072:mewaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:nwhFHU4HNwFH7MoOWexZFHV","tlshash":"59f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","first_seen":"2026-02-24T14:18:16.922224Z","last_seen":"2026-03-14T00:30:26.736648Z","times_seen":7,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/FavoriteGamesButton-Gc2t0UFU.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/FavoriteGamesButton-Gc2t0UFU.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X7BuSEJlTp9SCmSWri3ZLvNHUBDxVtHRN9arfFSyx2tFvKZdpx7tMaW438Y5JClzRD29ADqTjNSCeacuZzJt9S139onEJxPyvpzPa%2BlKzy%2FmgAw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647b8e78a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":427,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (426)","md5":"1afc8809fb5e9f5b815b42e2d8108480","sha1":"e7f578e703d58f7e06b89d41e629dfed29182f1c","sha256":"c3a2ee34677ec82d22971a0603bfc974bc7e1c5ff508a87671f65fdc2a0ba619","sha512":"838fd81c83fabd10f84108a0cb2ea62f40814c55066d7d180bb9e30944049f3e27671ea309a6d31cfa1e49327c1609cc45ed95aeb2f93c7ef5ae28cd1a4684e6","ssdeep":"","tlshash":"e9e0a3066049e1fe2b621ae52507c1142426a57cff98d19040d919953db1457c91fd6f","first_seen":"2026-02-24T14:18:16.824454Z","last_seen":"2026-03-14T00:30:26.837513Z","times_seen":7,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/ButtonWithAction-CuHHkS5y.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:32.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/ButtonWithAction-CuHHkS5y.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:32 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=prmRD%2FkSqMBDcX0fufPsYWl%2Bk5tD%2B1ws%2F%2BBckkQ4VXXYu%2Bzz%2FNJfd0M3aBMdECulUzkTvLBV2Q3SXIuMnDhRgVXxFbBxYqYZ89Xlirel6h9yioI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f9647b8fe8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c631c767a7c968bbaa39c24c1fe1d031","sha1":"3904c90eed9cc55366390f12680da5557efce93e","sha256":"7b88435e78c0dec8f0f93ade8fc987372c9f529d4dbf2b27117dad622762af68","sha512":"0937ed60f0b3e6078a75fabbfcb205ebde3c24017ef7720c758db8c94d980343dd607e97a939ba616b71a133a56f16aba85e3df837c480eaa341eeacc325f9d7","ssdeep":"","tlshash":"73d0950b1455d1fd03f576f1a117c1112615ae64f7c4c541805c55403ab155ac52ff2b","first_seen":"2026-02-24T14:18:16.941918Z","last_seen":"2026-03-14T00:30:26.697832Z","times_seen":7,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato|Lilita+One","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css?family=Lato|Lilita+One HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crm-lib.fasttrack-solutions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 24 Feb 2026 14:17:33 GMT\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1586,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2f31f582a62929942285136edb852eb4","sha1":"ade05009e3f52242452d23f325d0d60eb2f4945d","sha256":"86d1d33f6f9e190954cb9cf8f930c7ce03e60bb102b64f2ce0baab352285acab","sha512":"2e4b5ff5cb64ede4c3e63e2477f156c55597e1c3ddd83d888fd96c66bf7cc6716dcf522fad19cdde2a4a564f530022feaff488500797d01f3673e52e295ddabd","ssdeep":"","tlshash":"6e31bf92097ba80497930dc212ce7d32ef1e62406845a825afff18dcfc67c699362b0d","first_seen":"2025-09-20T10:36:49.753015Z","last_seen":"2026-08-14T15:14:21.929995Z","times_seen":178,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":141,"dns":1,"connect":21,"send":0,"wait":31,"receive":0,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/assets/CompetitionDetailsGame-BpCnBwyV.js","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:33.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /assets/CompetitionDetailsGame-BpCnBwyV.js HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://m.m-galabet1052.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:33 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:06 GMT\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NZWsfUOPf7QeqCTU%2BdlV%2BwBpaeHDPiUjRLO6LAv8jt6xm5A%2FO0VbqcgrGsCtBxks6nrL4OQINdmA%2F97%2FhMPFJPK35NLqMpP3gfGUJSsK6Pd4wtQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d2f96502f608a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":428,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (427)","md5":"8ecf6eba82b1d427c9369097a2788c23","sha1":"3f5edba702e981ada186fa1427b9e90e1a4ffcfd","sha256":"f421aaeca2ef184f55db524d3dccb433ba4658b26438fee665ac68a322ca3965","sha512":"cc24ea01fa7204baf75717c516a89efd9aa46daae5ba1e3336188cccc48335e449577dbd84bbe4f1d9c66d4deeab1255178fb380bf20b413e693b8929f77f506","ssdeep":"","tlshash":"57e02b964410af7863bfc1dfb2d052859670808c4b43cbe9b16c9b9c43c609d23057a2","first_seen":"2026-02-24T14:18:16.980886Z","last_seen":"2026-03-14T00:30:26.657503Z","times_seen":7,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.m-galabet1052.com/fonts/default/RobotoBold.woff2?v=609","fqdn":"m.m-galabet1052.com","domain":"m-galabet1052.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:34.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m-galabet1052.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 18:15:26 GMT","end":"Sun, 24 May 2026 18:15:25 GMT"},"fingerprint":{"sha1":"35:E6:95:FB:57:D9:D5:F8:3D:B2:13:86:06:B4:56:1D:63:B8:BA:36","sha256":"81:AB:30:58:21:E2:38:C1:DB:8A:30:78:50:E5:ED:AE:DD:C0:0A:CB:36:80:B2:3E:8C:AC:EF:6D:70:D3:CC:32"}}},"request":{"raw":"GET /fonts/default/RobotoBold.woff2?v=609 HTTP/1.1\r\nHost: m.m-galabet1052.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/assets/index.Cj5ks_WG.css\r\nCookie: PHPSESSID=7a21aec99e7c15f0a45204a67ca4bb23; b1749=0; TawkConnectionTime=0; twk_idm_key=FiSCOP7izUupWbsIWZHDo; _immortal|user-hash=2o9zqsN1QiwvjOxk_QUw1-nOJuVby09bJJ_X; twk_uuid_6909cb5dd368031952afadf5=%7B%22uuid%22%3A%221.92R1N0nOkt5MRlNB4PCozzXpV908W87a8LUJ5TXBLSbvnBQia70Hs9ZsyQ0ULDon49MlGAkb2EU29e667FILjIUBnDBOlUgLE2V69Uh7gpOcsILjts7v8BoX7Fmh%22%2C%22version%22%3A3%2C%22domain%22%3A%22m-galabet1052.com%22%2C%22ts%22%3A1771942652229%7D; _ga_MCEY36CK22=GS2.1.s1771942653$o1$g0$t1771942653$j60$l0$h0; _ga=GA1.1.1318102519.1771942653\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 62032\r\npriority: u=4,i=?0\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=14400\r\nlast-modified: Mon, 07 Jul 2025 05:56:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 2\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C61bz%2Fr0Y0IaS9Z%2FxCMtePR2GGsKj1m%2F5JzFdqbeqse1P5Y4NbczIT%2BsUP3Uy0Q8pfnguavaV23ITcSHWtKtF3ngSfFJh751nHDCuNcuVsB8Jko%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f965628098a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62032,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62032, version 1.0","md5":"5c3f2196f147bbbc3583de1008be7538","sha1":"b1d65e305e850cdd352734f7842cddfd30f08d0b","sha256":"c6213e789895a427306e62a03b1a96ac884f58957b4f14e27f8e4361e32bf382","sha512":"a0a556d7d670c7197f1daf9cc7d84b3872cbaa92f916bd092c3831d3936362ddde3e837e4330895a5d53f0783b761ded7d00d126a0a04feaea84d01d12e62f1d","ssdeep":"1536:+07i808sgDXsqfywKCgqTwnXO09CU+O2G48I5lkEGN2iBYF5cftfplD+2U:+epsGXZfeCgZXd9hAGtI56ZiF523+2U","tlshash":"2f53023e9427274226b1dcca96ece2ee16c278fb700119ddb41075ee9f32f814c83a56","first_seen":"2023-05-07T18:24:32Z","last_seen":"2026-08-15T11:25:22.013143Z","times_seen":2674,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-24","alert":"Sinkholed","trigger":"m.m-galabet1052.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-24","alert":"Phishing Block","trigger":"m.m-galabet1052.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.21btcoservice.com/content/images/casino/icon2/e089198aea916d4cc857a383c5a748bf_casinoGameIcon2.webp","fqdn":"cms.21btcoservice.com","domain":"21btcoservice.com","tld":"com"},"ip":{"addr":"185.162.229.2","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://m.m-galabet1052.com/tr/","date":"2026-02-24T14:17:43.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"21btcoservice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 09:27:52 GMT","end":"Sun, 26 Apr 2026 10:27:48 GMT"},"fingerprint":{"sha1":"C0:5C:3A:3F:6A:3C:57:9D:C2:40:2D:47:B5:A2:04:F6:9D:BE:F0:50","sha256":"A3:E6:4D:96:37:09:AC:D3:60:9A:6E:C9:44:4F:5A:DE:A2:30:D8:0F:E1:CA:43:97:FC:1B:85:CB:4B:DF:A0:8C"}}},"request":{"raw":"GET /content/images/casino/icon2/e089198aea916d4cc857a383c5a748bf_casinoGameIcon2.webp HTTP/1.1\r\nHost: cms.21btcoservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://m.m-galabet1052.com/\r\nCookie: __cf_bm=zeEuii3ykWej.Pap0gZzF_othlv.d_RmepUIql8VSPc-1771942654-1.0.1.1-yYlpjXv5aFbvrYlOnJOHIc48CiBzoxiVbvml99QhWo6ILgObHAriDGKtcHkZQO.P3608Yz8cl2wlMmgrF.pE.YSAo00JiTwROEJ1.71vHuQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 24 Feb 2026 14:17:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10324\r\nserver: cloudflare\r\nlast-modified: Thu, 14 Mar 2024 11:26:23 GMT\r\npriority: u=4,i=?0\r\netag: \"65f2dedf-2854\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=sYsECERJc0zVDoZkAHkKzOZmOtZjKbZs8mGR2uuajV8-1771942663.9802363-1.0.1.1-2M2o4Tebo7UXwrqYCSVublN_OvNQMz0XUN9skcnTEQSHoyKSaBsyDT.0om.hEj5YlaE9511bW60u9BRyImwH2Mi3oSdBp2WsntJUr_NO9OdyWvJvC6xcWNKQQ4.blBct; HttpOnly; Secure; Path=/; Domain=21btcoservice.com; Expires=Tue, 24 Feb 2026 14:47:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZzgI8H2yKrLwQ6zcGZmUYd%2Bno0IUVY8fAjK9GDq9ClK3UAr5crqsqZGwLcFA7Y2%2FfmhDa9UgmaEYwRzZBQI1G0McUO2%2BPpNR4lrpu3mJvTFJoCHVwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d2f9691dacc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":10324,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x155, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"007c147c0a1bbce7acfb595dee832e09","sha1":"75a3d71cba37e05b14eeae6f2b7bbbfeee7ef799","sha256":"4d30d5dbac3f3a6ba81c589abbea036d8b39b1856121b21af2b9a61b7520b9dd","sha512":"926696b4e82ffde52ed014745ff5f896b55c6a1843060f983dc402132ae97ee6e64493e2f5bddc38a1fa47a5c6173c351d786953ec334f913ad6ce62397d54c8","ssdeep":"192:N1/3WbMLrXsDWDfMzKI3FgrzNMkM1hSylHc3blgc+5dpRHSq6tnSyngcXMGq73:P/3egXmSMz3F1kM1vlHy5gc+Pyq6tSy+","tlshash":"e322c075f0ba8e2075df0d8cfea86dfaae4d86c4203da50538a6dc53533c4d6890c89b","first_seen":"2026-02-24T14:18:16.994012Z","last_seen":"2026-03-14T00:30:26.780199Z","times_seen":7,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}